tripathysagar/man_text huggingface dataset:
# pam_debug

## NAME



           pam_debug - PAM module to debug the PAM stack
    


## SYNOPSIS



    
           **pam_debug.so**[auth=_value_] [cred=_value_] [acct=_value_]
                        [prechauthtok=_value_] [chauthtok=_value_] [auth=_value_]
                        [open_session=_value_] [close_session=_value_]
    


## DESCRIPTION



           The pam_debug PAM module is intended as a debugging aide for
           determining how the PAM stack is operating. This module returns
           what its module arguments tell it to return.
    


## OPTIONS



           **auth=**_value_
               The pam_sm_authenticate(3) function will return _value_.
    
           **cred=**_value_
               The pam_sm_setcred(3) function will return _value_.
    
           **acct=**_value_
               The pam_sm_acct_mgmt(3) function will return _value_.
    
           **prechauthtok=**_value_
               The pam_sm_chauthtok(3) function will return _value_ if the
               _PAM_PRELIM_CHECK_ flag is set.
    
           **chauthtok=**_value_
               The pam_sm_chauthtok(3) function will return _value_ if the
               _PAM_PRELIM_CHECK_ flag is **not** set.
    
           **open_session=**_value_
               The pam_sm_open_session(3) function will return _value_.
    
           **close_session=**_value_
               The pam_sm_close_session(3) function will return _value_.
    
           Where _value_ can be one of: success, open_err, symbol_err,
           service_err, system_err, buf_err, perm_denied, auth_err,
           cred_insufficient, authinfo_unavail, user_unknown, maxtries,
           new_authtok_reqd, acct_expired, session_err, cred_unavail,
           cred_expired, cred_err, no_module_data, conv_err, authtok_err,
           authtok_recover_err, authtok_lock_busy, authtok_disable_aging,
           try_again, ignore, abort, authtok_expired, module_unknown,
           bad_item, conv_again, incomplete.
    


## MODULE TYPES PROVIDED



           All module types (**auth** , **account** , **password** and **session**) are
           provided.
    


## RETURN VALUES



           PAM_SUCCESS
               Default return code if no other value was specified, else
               specified return value.
    


## EXAMPLES



               auth    requisite       pam_permit.so
               auth    [success=2 default=ok]  pam_debug.so auth=perm_denied cred=success
               auth    [default=reset]         pam_debug.so auth=success cred=perm_denied
               auth    [success=done default=die] pam_debug.so
               auth    optional        pam_debug.so auth=perm_denied cred=perm_denied
               auth    sufficient      pam_debug.so auth=success cred=success
    


* * *
# devlink-monitor

## NAME



           devlink-monitor - state monitoring
    


## SYNOPSIS



           **devlink monitor**[ **all** | _OBJECT-LIST_ ]
    


## DESCRIPTION



           The **devlink** utility can monitor the state of devlink devices and
           ports continuously. This option has a slightly different format.
           Namely, the **monitor** command is the first in the command line and
           then the object list.
    
           _OBJECT-LIST_ is the list of object types that we want to monitor.
           It may contain **dev** , **port** , **health** , **trap** , **trap-group** , **trap-policer**.
    
           **devlink** opens Devlink Netlink socket, listens on it and dumps
           state changes.
    


* * *
# systemd-modules-load.service

## NAME



           systemd-modules-load.service, systemd-modules-load - Load kernel
           modules at boot
    


## SYNOPSIS



           systemd-modules-load.service
    
           /usr/lib/systemd/systemd-modules-load
    


## DESCRIPTION



           systemd-modules-load.service is an early boot service that loads
           kernel modules. It reads static configuration from files in /usr/
           and /etc/, but also runtime configuration from /run/ and the
           kernel command line (see below).
    
           See modules-load.d(5) for information about the configuration
           format of this service and paths where configuration files can be
           created.
    


## KERNEL COMMAND LINE



           systemd-modules-load.service understands the following kernel
           command line parameters:
    
           _modules_load=_ , _rd.modules_load=_
               Takes a comma-separated list of kernel modules to statically
               load during early boot. The option prefixed with "rd."  is
               read in the initrd only.
    
               Added in version 187.
    


* * *
# e4defrag

## NAME



           e4defrag - online defragmenter for ext4 file system
    


## SYNOPSIS



           **e4defrag**[ **-c**] [ **-v**] _target_ ...
    


## DESCRIPTION



           **e4defrag** reduces fragmentation of extent based file. The file
           targeted by **e4defrag** is created on ext4 file system made with "-O
           extent" option (see mke2fs(8)).  The targeted file gets more
           contiguous blocks and improves the file access speed.
    
           _target_ is a regular file, a directory, or a device that is mounted
           as ext4 file system.  If _target_ is a directory, **e4defrag** reduces
           fragmentation of all files in it. If _target_ is a device, **e4defrag**
           gets the mount point of it and reduces fragmentation of all files
           in this mount point.
    


## OPTIONS



           **-c** Get a current fragmentation count and an ideal
                  fragmentation count, and calculate fragmentation score
                  based on them. By seeing this score, we can determine
                  whether we should execute **e4defrag** to _target_.  When used
                  with **-v** option, the current fragmentation count and the
                  ideal fragmentation count are printed for each file.
    
                  Also this option outputs the average data size in one
                  extent. If you see it, you'll find the file has ideal
                  extents or not. Note that the maximum extent size is
                  131072KB in ext4 file system (if block size is 4KB).
    
                  If this option is specified, _target_ is never defragmented.
    
           **-v** Print error messages and the fragmentation count before and
                  after defrag for each file.
    


## NOTES



           **e4defrag** does not support swap file, files in lost+found
           directory, and files allocated in indirect blocks. When _target_ is
           a device or a mount point, **e4defrag** doesn't defragment files in
           mount point of other device.
    
           It is safe to run e4defrag on a file while it is actively in use
           by another application.  Since the contents of file blocks are
           copied using the page cache, this can result in a performance
           slowdown to both e4defrag and the application due to contention
           over the system's memory and disk bandwidth.
    
           If the file system's free space is fragmented, or if there is
           insufficient free space available, e4defrag may not be able to
           improve the file's fragmentation.
    
           Non-privileged users can execute **e4defrag** to their own file, but
           the score is not printed if **-c** option is specified. Therefore, it
           is desirable to be executed by root user.
    


* * *
# tc-nat

## NAME



           nat - stateless native address translation action
    


## SYNOPSIS



           **tc**... **action nat** _DIRECTION OLD NEW_
    
           _DIRECTION_ := { **ingress** | **egress**}
    
           _OLD_ := _IPV4_ADDR_SPEC_
    
           _NEW_ := _IPV4_ADDR_SPEC_
    
           _IPV4_ADDR_SPEC_ := { **default** | **any** | **all** |
                   _in_addr_[**/**{_prefix_ |_netmask_}]
    


## DESCRIPTION



           The **nat** action allows one to perform NAT without the overhead of
           conntrack, which is desirable if the number of flows or addresses
           to perform NAT on is large. This action is best used in
           combination with the **u32** filter to allow for efficient lookups of
           a large number of stateless NAT rules in constant time.
    


## OPTIONS



           **ingress**
                  Translate destination addresses, i.e. perform DNAT.
    
           **egress** Translate source addresses, i.e. perform SNAT.
    
           _OLD_    Specifies addresses which should be translated.
    
           _NEW_    Specifies addresses which _OLD_ should be translated into.
    


## NOTES



           The accepted address format in _OLD_ and _NEW_ is quite flexible. It
           may either consist of one of the keywords **default** , **any** or **all** ,
           representing the all-zero IP address or a combination of IP
           address and netmask or prefix length separated by a slash (**/**)
           sign. In any case, the mask (or prefix length) value of _OLD_ is
           used for _NEW_ as well so that a one-to-one mapping of addresses is
           assured.
    
           Address translation is done using a combination of binary
           operations. First, the original (source or destination) address is
           matched against the value of _OLD_.  If the original address fits,
           the new address is created by taking the leading bits from _NEW_
           (defined by the netmask of _OLD_) and taking the remaining bits from
           the original address.
    
           There is rudimental support for upper layer protocols, namely TCP,
           UDP and ICMP.  While for the first two only checksum recalculation
           is performed, the action also takes care of embedded IP headers in
           ICMP packets by translating the respective address therein, too.
    


* * *
# tc-pfifo_fast

## NAME



           pfifo_fast - three-band first in, first out queue
    


## DESCRIPTION



           pfifo_fast is the default qdisc of each interface.
    
           Whenever an interface is created, the pfifo_fast qdisc is
           automatically used as a queue. If another qdisc is attached, it
           preempts the default pfifo_fast, which automatically returns to
           function when an existing qdisc is detached.
    
           In this sense this qdisc is magic, and unlike other qdiscs.
    


## ALGORITHM



           The algorithm is very similar to that of the classful tc-prio(8)
           qdisc.  **pfifo_fast** is like three tc-pfifo(8) queues side by side,
           where packets can be enqueued in any of the three bands based on
           their Type of Service bits or assigned priority.
    
           Not all three bands are dequeued simultaneously - as long as lower
           bands have traffic, higher bands are never dequeued. This can be
           used to prioritize interactive traffic or penalize 'lowest cost'
           traffic.
    
           Each band can be txqueuelen packets long, as configured with
           ip(8).  Additional packets coming in are not enqueued but are
           instead dropped.
    
           See tc-prio(8) for complete details on how TOS bits are translated
           into bands.
    


## PARAMETERS



           txqueuelen
                  The length of the three bands depends on the interface
                  txqueuelen, as specified with ip(8).
    


## BUGS



           Does not maintain statistics and does not show up in tc qdisc ls.
           This is because it is the automatic default in the absence of a
           configured qdisc.
    


* * *
# ibsrpdm

## NAME



           ibsrpdm - Discover SRP targets on an InfiniBand Fabric
    


## SYNOPSIS



           **ibsrpdm [**_OPTIONS_**]**
    


## DESCRIPTION



           List InfiniBand SCSI RDMA Protocol (SRP) targets on an IB fabric.
    


## OPTIONS



           **-c** Generate output suitable for piping directly to a
                  /sys/class/infiniband_srp/srp-<device>-<port>/add_target
                  file
    
           **-d** _DEVICE_
                  Use device file _DEVICE_ (default /dev/infiniband/umad0)
    
           **-k** _P_KEY_
                  Use InfiniBand partition key _P_KEY_ (default 0xffff)
    
           **-v** Print more verbose output
    


* * *
# ibfindnodesusing

## NAME



           ibfindnodesusing - find a list of end nodes which are routed
           through the specified switch and port
    


## SYNOPSIS



           ibfindnodesusing.pl [options] <switch_guid|switch_name> <port>
    


## DESCRIPTION



           ibfindnodesusing.pl uses ibroute and detects the current nodes
           which are routed through both directions of the link specified.
           The link is specified by one switch port end; the script finds the
           remote end automatically.
    


## OPTIONS



           **-h** show help
    
           **-R** Recalculate the ibnetdiscover information, ie do not use
                  the cached information.  This option is slower but should
                  be used if the diag tools have not been used for some time
                  or if there are other reasons to believe that the fabric
                  has changed.
    
           **-C <ca_name>    **use the specified ca_name.
    
           **-P <ca_port>    **use the specified ca_port.
    


## FILES



       **CONFIG FILE**
           /ssd11/FOSS/rdma-core/build/etc/infiniband-diags/ibdiag.conf
    
           A global config file is provided to set some of the common options
           for all tools.  See supplied config file for details.
    
       **NODE NAME MAP FILE FORMAT**
           The node name map is used to specify user friendly names for nodes
           in the output.  GUIDs are used to perform the lookup.
    
           This functionality is provided by the opensm-libs package.  See
           **opensm**(8) for the file location for your installation.
    
           **Generically:**
    
              # comment
              <guid> "<name>"
    
           **Example:**
    
              # IB1
              # Line cards
              0x0008f104003f125c "IB1 (Rack 11 slot 1   ) ISR9288/ISR9096 Voltaire sLB-24D"
              0x0008f104003f125d "IB1 (Rack 11 slot 1   ) ISR9288/ISR9096 Voltaire sLB-24D"
              0x0008f104003f10d2 "IB1 (Rack 11 slot 2   ) ISR9288/ISR9096 Voltaire sLB-24D"
              0x0008f104003f10d3 "IB1 (Rack 11 slot 2   ) ISR9288/ISR9096 Voltaire sLB-24D"
              0x0008f104003f10bf "IB1 (Rack 11 slot 12  ) ISR9288/ISR9096 Voltaire sLB-24D"
    
              # Spines
              0x0008f10400400e2d "IB1 (Rack 11 spine 1   ) ISR9288 Voltaire sFB-12D"
              0x0008f10400400e2e "IB1 (Rack 11 spine 1   ) ISR9288 Voltaire sFB-12D"
              0x0008f10400400e2f "IB1 (Rack 11 spine 1   ) ISR9288 Voltaire sFB-12D"
              0x0008f10400400e31 "IB1 (Rack 11 spine 2   ) ISR9288 Voltaire sFB-12D"
              0x0008f10400400e32 "IB1 (Rack 11 spine 2   ) ISR9288 Voltaire sFB-12D"
    
              # GUID   Node Name
              0x0008f10400411a08 "SW1  (Rack  3) ISR9024 Voltaire 9024D"
              0x0008f10400411a28 "SW2  (Rack  3) ISR9024 Voltaire 9024D"
              0x0008f10400411a34 "SW3  (Rack  3) ISR9024 Voltaire 9024D"
              0x0008f104004119d0 "SW4  (Rack  3) ISR9024 Voltaire 9024D"
    


* * *
# blkpr

## NAME



           blkpr - run a persistent-reservations command on a device
    


## SYNOPSIS



           **blkpr**[options] _device_
    


## DESCRIPTION



           **blkpr** is used to run a persistent-reservations command on a device
           that supports the Persistent Reservations feature.
    
           The _device_ argument is the pathname of the block device.
    


## OPTIONS



           **-c** , **--command** _command_
               The command for managing persistent reservations. Supported
               commands are: **register** , **reserve** , **release** , **preempt** ,
               **preempt-abort** , and **clear**.
    
           **-k** , **--key** _key_
               The key the command should operate on.
    
           **-K** , **--oldkey** _oldkey_
               The old key the command should operate on.
    
           **-f** , **--flag** _flag_
               Supported flag is **ignore-key**.
    
           **-t** , **--type** _type_
               Supported types are **write-exclusive** , **exclusive-access** ,
               **write-exclusive-reg-only** , **exclusive-access-reg-only** ,
               **write-exclusive-all-regs** , and **exclusive-access-all-regs**.
    
           **-h** , **--help**
               Display help text and exit.
    
           **-V** , **--version**
               Display version and exit.
    


## AVAILABILITY



           The **blkpr** command is part of the util-linux package which can be
           downloaded from Linux Kernel Archive
           <https://www.kernel.org/pub/linux/utils/util-linux/>. This page is
           part of the _util-linux_ (a random collection of Linux utilities)
           project. Information about the project can be found at 
           ⟨https://www.kernel.org/pub/linux/utils/util-linux/⟩. If you have a
           bug report for this manual page, send it to
           util-linux@vger.kernel.org. This page was obtained from the
           project's upstream Git repository
           ⟨git://git.kernel.org/pub/scm/utils/util-linux/util-linux.git⟩ on
           2025-08-11. (At that time, the date of the most recent commit that
           was found in the repository was 2025-08-05.) If you discover any
           rendering problems in this HTML version of the page, or you
           believe there is a better or more up-to-date source for the page,
           or you have corrections or improvements to the information in this
           COLOPHON (which is _not_ part of the original manual page), send a
           mail to man-pages@man7.org
    
    util-linux 2.42-start-521-ec46  2025-08-09                       _BLKPR_(8)
    


* * *
# systemd-factory-reset-generator

## NAME



           systemd-factory-reset-generator - Pull factory-reset-now.target
           into the initial boot transaction when factory reset has been
           requested
    


## SYNOPSIS



           /usr/lib/systemd/system-generators/systemd-factory-reset-generator
    


## DESCRIPTION



           systemd-factory-reset-generator is a generator that pulls
           factory-reset-now.target into the initial boot transaction when
           the factory reset operation has been requested, either via the
           _systemd.factory_reset=_ kernel command line option or via the
           _FactoryResetRequest_ EFI variable.
    
           systemd-factory-reset-generator implements systemd.generator(7).
    


## NOTES



            1. Factory Reset
               https://systemd.io/FACTORY_RESET
    


* * *
# yum-updatesd

## NAME



           yum-updatesd - Update notifier daemon
    


## SYNOPSIS



           **yum-updatesd**
    


## DESCRIPTION



           **yum-updatesd** provides notification of updates which are available
           to be applied to your system.  This notification can be done
           either via syslog, email or over dbus.  Configuration is done via
           the **yum-updatesd.conf(5)** file.
    


* * *
# rpm-plugins

## NAME



           rpm-plugins - Plugins for the RPM Package Manager
    


## Description



           RPM plugins provide functionality that is not suited to be used
           everywhere.  They may not be built or shipped on some platforms or
           may not be installed or be disabled on some systems.
    
           This allows plugins to interface with systems that may not
           acceptable as a dependency for RPM and to provide functionality
           that may be unwanted under some circumstances.
    
           For now the plugin API is internal only.  So there is a limited
           number of plugins in the RPM sources.
    


## Configuration



           Some plugins can be configured by specific macros or influenced by
           command line parameters.  But most can only be turned on or off.
           See the plugin's man page for details.
    
           Plugins are controlled by a macro _%__transaction_NAME_ which is set
           to the location of the plugin file.  Undefining the macro or
           setting it to _%{nil}_ will prevent the plugin from being run.
    
           This can be done on the RPM command line e.g. with
           **--undefine=__transaction_syslog**.  To disable a plugin permantently
           drop a file in _/etc/rpm/_ that contains
    
           __transaction_NAME %{nil}
    
           Another option is to remove the plugin from the system if it is
           packaged in its own sub package.
    
           For some operations it may be desirable to disable all plugins at
           once.  This can be done by passing **--noplugins** to rpm(8) at the
           command line.
    


* * *
# systemd-hostnamed.service

## NAME



           systemd-hostnamed.service, systemd-hostnamed - Daemon to control
           system hostname from programs
    


## SYNOPSIS



           systemd-hostnamed.service
    
           /usr/lib/systemd/systemd-hostnamed
    


## DESCRIPTION



           systemd-hostnamed.service is a system service that may be used to
           change the system's hostname and related machine metadata from
           user programs. It is automatically activated on request and
           terminates itself when unused.
    
           It currently offers access to five variables:
    
           •   The current hostname (Example: "dhcp-192-168-47-11")
    
           •   The static (configured) hostname (Example:
               "lennarts-computer")
    
           •   The pretty hostname (Example: "Lennart's Computer")
    
           •   A suitable icon name for the local host (Example:
               "computer-laptop")
    
           •   A chassis type (Example: "tablet")
    
           The static hostname is stored in /etc/hostname, see hostname(5)
           for more information. The pretty hostname, chassis type, and icon
           name are stored in /etc/machine-info, see machine-info(5).
    
           The tool hostnamectl(1) is a command line client to this service.
    
           See org.freedesktop.hostname1(5) and
           org.freedesktop.LogControl1(5) for a description of the D-Bus API.
    


* * *
# rpm-plugin-unshare

## NAME



           rpm-plugin-unshare - Unshare plugin for the RPM Package Manager
    


## Description



           This plugin allows using various Linux-specific namespace-related
           technologies inside transactions, such as to harden and limit
           scriptlet access to resources.
    


## Configuration



           This plugin implements the following configurables:
    
           %__transaction_unshare_paths
                  A colon-separated list of paths to privately mount during
                  scriptlet execution.  Typical examples would be /tmp to
                  protect against insecure temporary file usage inside
                  scriptlets, and /home to prevent scriptlets from accessing
                  user home directories.  When path unsharing is enabled, any
                  mounts made from scriptlets are also private to the
                  scriptlet (and vice versa, mount changes on the host are
                  not visible to the scriptlet).
    
                  Private mounts in chroot-operations is unimplemented.
    
           %__transaction_unshare_nonet
                  Non-zero value disables network access during scriptlet
                  execution.
    
           See rpm-plugins(8) on how to control plugins in general.
    


* * *
# ipmaddr

## NAME



           **ipmaddr** - adds, changes, deletes, and displays multicast addresses
    


## SYNOPSIS



           **ipmaddr**[<**operation** >] [<**args** >]
    


## NOTE



           This program is obsolete. Please use **ip maddr** instead, and see
           ip-maddress(8) for more information.
    


## DESCRIPTION



           The **ipmaddr** command can perform one of the following operations:
    
           **add** - add a multicast address
    
           **change** - change a multicast address
    
           **del** - delete a multicast address
    
           **show** - list multicast addresses
    


* * *
# cupsctl

## NAME



           cupsctl - configure cupsd.conf options
    


## SYNOPSIS



           **cupsctl**[ **-h** _server_[**:**_port_] ] [ **-E**] [ **-U** _username_ ] [
           **--**[**no-**]**debug-logging**] [ **--**[**no-**]**remote-admin**] [ **--**[**no-**]**remote-any**
           ] [ **--**[**no-**]**share-printers**] [ **--**[**no-**]**user-cancel-any**] [
           _name=value_ ]
    


## DESCRIPTION



           **cupsctl** updates or queries the _cupsd.conf_ file for a server. When
           no changes are requested, the current configuration values are
           written to the standard output in the format "name=value", one per
           line.
    


## OPTIONS



           The following options are recognized:
    
           **-E** Enables encryption on the connection to the scheduler.
    
           **-U** _username_
                Specifies an alternate username to use when authenticating
                with the scheduler.
    
           **-h** _server_[**:**_port_]
                Specifies the server address.  Note: This option must occur
                before all others.
    
           **--**[**no-**]**debug-logging**
                Enables (disables) debug logging to the _error_log_ file.
    
           **--**[**no-**]**remote-admin**
                Enables (disables) remote administration.
    
           **--**[**no-**]**remote-any**
                Enables (disables) printing from any address, e.g., the
                Internet.
    
           **--**[**no-**]**share-printers**
                Enables (disables) sharing of local printers with other
                computers.
    
           **--**[**no-**]**user-cancel-any**
                Allows (prevents) users to cancel jobs owned by others.
    


## EXAMPLES



           Display the current settings:
    
               cupsctl
    
           Enable debug logging:
    
               cupsctl --debug-logging
    
           Get the current debug logging state:
    
               cupsctl | grep '^_debug_logging' | awk -F= '{print $2}'
    
           Disable printer sharing:
    
               cupsctl --no-share-printers
    


## KNOWN ISSUES



           You cannot set the Listen or Port directives using **cupsctl**.
    


* * *
# systemd-userdbd.service

## NAME



           systemd-userdbd.service, systemd-userdbd - JSON User/Group Record
           Query Multiplexer/NSS Compatibility
    


## SYNOPSIS



           systemd-userdbd.service
    
           /usr/lib/systemd/systemd-userdbd
    


## DESCRIPTION



           **systemd-userdbd** is a system service that multiplexes user/group
           lookups to all local services that provide JSON user/group record
           definitions to the system. In addition it synthesizes JSON
           user/group records from classic UNIX/glibc NSS user/group records
           in order to provide full backwards compatibility. It may also pick
           up statically defined JSON user/group records from files in
           /etc/userdb/, /run/userdb/, /run/host/userdb/ and /usr/lib/userdb/
           with the ".user" extension.
    
           Most of **systemd-userdbd** 's functionality is accessible through the
           userdbctl(1) command.
    
           The user and group records this service provides access to follow
           the **JSON User Records******[1] and**JSON Group Record******[2] definitions.
           This service implements the**User/Group Record Lookup API via**
           **Varlink******[3], and multiplexes access other services implementing
           this API, too. It is thus both server and client of this API.
    
           This service provides three distinct**Varlink******[4] services:**io.systemd.Multiplexer** provides a single, unified API for querying
           JSON user and group records. Internally it talks to all other
           user/group record services running on the system in parallel and
           forwards any information discovered. This simplifies clients
           substantially since they need to talk to a single service only
           instead of all of them in parallel.  **io.systemd.NameServiceSwitch**
           provides compatibility with classic UNIX/glibc NSS user records,
           i.e. converts **struct passwd** and **struct group** records as acquired
           with APIs such as **getpwnam**(1) to JSON user/group records, thus
           hiding the differences between the services as much as possible.
           **io.systemd.DropIn** makes JSON user/group records from the
           aforementioned drop-in directories available.
    


## NOTES



            1. JSON User Records
               https://systemd.io/USER_RECORD
    
            2. JSON Group Record
               https://systemd.io/GROUP_RECORD
    
            3. User/Group Record Lookup API via Varlink
               https://systemd.io/USER_GROUP_API
    
            4. Varlink
               https://varlink.org/
    


* * *
# swaplabel

## NAME



           swaplabel - print or change the label or UUID of a swap area
    


## SYNOPSIS



           **swaplabel**[**-L** _label_] [**-U** _UUID_] _device_
    


## DESCRIPTION



           **swaplabel** will display or change the label or UUID of a swap
           partition located on _device_ (or regular file).
    
           If the optional arguments **-L** and **-U** are not given, **swaplabel** will
           simply display the current swap-area label and UUID of _device_.
    
           If an optional argument is present, then **swaplabel** will change the
           appropriate value on _device_. These values can also be set during
           swap creation using mkswap(8). The **swaplabel** utility allows
           changing the label or UUID on an actively used swap device.
    


## OPTIONS



           **-L** , **--label** _label_
               Specify a new _label_ for the device. Swap partition labels can
               be at most 16 characters long. If _label_ is longer than 16
               characters, **swaplabel** will truncate it and print a warning
               message.
    
           **-U** , **--uuid** _UUID_
               Specify a new _UUID_ for the device. The _UUID_ must be in the
               standard 8-4-4-4-12 character format, such as is output by
               uuidgen(1).
    
           **-h** , **--help**
               Display help text and exit.
    
           **-V** , **--version**
               Display version and exit.
    


## ENVIRONMENT



           LIBBLKID_DEBUG=all
               enables libblkid debug output.
    


## AVAILABILITY



           The **swaplabel** command is part of the util-linux package which can
           be downloaded from Linux Kernel Archive
           <https://www.kernel.org/pub/linux/utils/util-linux/>. This page is
           part of the _util-linux_ (a random collection of Linux utilities)
           project. Information about the project can be found at 
           ⟨https://www.kernel.org/pub/linux/utils/util-linux/⟩. If you have a
           bug report for this manual page, send it to
           util-linux@vger.kernel.org. This page was obtained from the
           project's upstream Git repository
           ⟨git://git.kernel.org/pub/scm/utils/util-linux/util-linux.git⟩ on
           2025-08-11. (At that time, the date of the most recent commit that
           was found in the repository was 2025-08-05.) If you discover any
           rendering problems in this HTML version of the page, or you
           believe there is a better or more up-to-date source for the page,
           or you have corrections or improvements to the information in this
           COLOPHON (which is _not_ part of the original manual page), send a
           mail to man-pages@man7.org
    
    util-linux 2.42-start-521-ec46  2025-08-09                   _SWAPLABEL_(8)
    


* * *
# semanage-interface

## NAME



           **semanage-interface - SELinux Policy Management network interface**
           **tool**
    


## SYNOPSIS



           **semanage interface [-h] [-n] [-N] [-S STORE] [ --add -t TYPE -r**
           **RANGE interface | --delete interface | --deleteall | --extract |**
           **--list [-C] | --modify -t TYPE -r RANGE interface ]**
    


## DESCRIPTION



           semanage is used to configure certain elements of SELinux policy
           without requiring modification to or recompilation from policy
           sources.  **semanage interface** controls the labels assigned to
           network interfaces.
    


## OPTIONS



           _-h, --help_
                  Show this help message and exit
    
           _-n, --noheading_
                  Do not print heading when listing the specified object type
    
           _-N, --noreload_
                  Do not reload policy after commit
    
           _-S STORE, --store STORE_
                  Select an alternate SELinux Policy Store to manage
    
           _-C, --locallist_
                  List local customizations
    
           _-a, --add_
                  Add a record of the specified object type
    
           _-d, --delete_
                  Delete a record of the specified object type
    
           _-m, --modify_
                  Modify a record of the specified object type
    
           _-l, --list_
                  List records of the specified object type
    
           _-E, --extract_
                  Extract customizable commands, for use within a transaction
    
           _-D, --deleteall_
                  Remove all local customizations
    
           _-t TYPE, --type TYPE_
                  SELinux type for the object
    
           _-r RANGE, --range RANGE_
                  MLS/MCS Security Range (MLS/MCS Systems only) SELinux Range
                  for SELinux login mapping defaults to the SELinux user
                  record range. SELinux Range for SELinux user defaults to
                  s0.
    


## EXAMPLE



           list all interface definitions
           # semanage interface -l
           Assign type netif_t and MLS/MCS range s0:c0.c1023 to interface eth0
           # semanage interface -a -t netif_t -r s0:c0.c1023 eth0
    


* * *
# pam_timestamp

## NAME



           pam_timestamp - Authenticate using cached successful
           authentication attempts
    


## SYNOPSIS



    
           **pam_timestamp.so**[timestampdir=_directory_]
                            [timestamp_timeout=_number_] [verbose] [debug]
    


## DESCRIPTION



           In a nutshell, _pam_timestamp_ caches successful authentication
           attempts, and allows you to use a recent successful attempt as the
           basis for authentication. This is similar mechanism which is used
           in **sudo**.
    
           When an application opens a session using _pam_timestamp_ , a
           timestamp file is created in the _timestampdir_ directory for the
           user. When an application attempts to authenticate the user, a
           _pam_timestamp_ will treat a sufficiently recent timestamp file as
           grounds for succeeding.
    


## OPTIONS



           **timestampdir=**_directory_
               Specify an alternate directory where _pam_timestamp_ creates
               timestamp files.
    
           **timestamp_timeout=**_number_
               How long should _pam_timestamp_ treat timestamp as valid after
               their last modification date (in seconds). Default is 300
               seconds.
    
           **verbose**
               Attempt to inform the user when access is granted.
    
           **debug**
               Turns on debugging messages sent to syslog(3).
    


## MODULE TYPES PROVIDED



           The **auth** and **session** module types are provided.
    


## RETURN VALUES



           PAM_AUTH_ERR
               The module was not able to retrieve the user name or no valid
               timestamp file was found.
    
           PAM_SUCCESS
               Everything was successful.
    
           PAM_SESSION_ERR
               Timestamp file could not be created or updated.
    


## NOTES



           Users can get confused when they are not always asked for
           passwords when running a given program. Some users reflexively
           begin typing information before noticing that it is not being
           asked for.
    


## EXAMPLES



               auth sufficient pam_timestamp.so verbose
               auth required   pam_unix.so
    
               session required pam_unix.so
               session optional pam_timestamp.so
    


## FILES



           /var/run/pam_timestamp/...
               timestamp files and directories
    


* * *
# semodule_package

## NAME



           semodule_package - Create a SELinux policy module package.
    


## SYNOPSIS



           **semodule_package -o <output file> -m <module> [-f <file contexts>]**
    


## DESCRIPTION



           semodule_package is the tool used to create a SELinux policy
           module package from a binary policy module and optionally other
           data such as file contexts.  semodule_package packages binary
           policy modules created by checkmodule.  The policy package created
           by semodule_package can then be installed via semodule.
    


## EXAMPLE



           # Build a policy package for a base module.
           $ semodule_package -o base.pp -m base.mod -f file_contexts
           # Build a policy package for a httpd module.
           $ semodule_package -o httpd.pp -m httpd.mod -f httpd.fc
           # Build a policy package for local TE rules and no file contexts.
           $ semodule_package -o local.pp -m local.mod
    


## OPTIONS



           **-o --outfile <output file>**
                  Policy module package file generated by this tool.
    
           **-s --seuser <seuser file>**
                  seuser file to be included in the package.
    
           **-u --user_extra <user extra file>**
                  user_extra file to be included in the package.
    
           **-m --module <Module file>**
                  Policy module file to be included in the package.
    
           **-f --fc <File context file>**
                  File contexts file for the module (optional).
    
           **-n --nc <netfilter context file>**
                  netfilter context file to be included in the package.
    
           **-h --help**
                  Show help message.
    


* * *
# pam_group

## NAME



           pam_group - PAM module for group access
    


## SYNOPSIS



    
           **pam_group.so**
    


## DESCRIPTION



           The pam_group PAM module does not authenticate the user, but
           instead it grants group memberships (in the credential setting
           phase of the authentication module) to the user. Such memberships
           are based on the service they are applying for.
    
           By default rules for group memberships are taken from config file
           /etc/security/group.conf.
    
           This module's usefulness relies on the file-systems accessible to
           the user. The point being that once granted the membership of a
           group, the user may attempt to create a **setgid** binary with a
           restricted group ownership. Later, when the user is not given
           membership to this group, they can recover group membership with
           the precompiled binary. The reason that the file-systems that the
           user has access to are so significant, is the fact that when a
           system is mounted _nosuid_ the user is unable to create or execute
           such a binary file. For this module to provide any level of
           security, all file-systems that the user has write access to
           should be mounted _nosuid_.
    
           The pam_group module functions in parallel with the /etc/group
           file. If the user is granted any groups based on the behavior of
           this module, they are granted _in addition_ to those entries
           /etc/group (or equivalent).
    


## OPTIONS



           This module does not recognise any options.
    


## MODULE TYPES PROVIDED



           Only the **auth** module type is provided.
    


## RETURN VALUES



           PAM_SUCCESS
               group membership was granted.
    
           PAM_ABORT
               Not all relevant data could be gotten.
    
           PAM_BUF_ERR
               Memory buffer error.
    
           PAM_CRED_ERR
               Group membership was not granted.
    
           PAM_IGNORE
               **pam_sm_authenticate** was called which does nothing.
    
           PAM_USER_UNKNOWN
               The user is not known to the system.
    


## FILES



           /etc/security/group.conf
               Default configuration file
    


* * *
# systemd-sysupdated.service

## NAME



           systemd-sysupdated.service, systemd-sysupdated - System Update
           Service
    


## SYNOPSIS



           systemd-sysupdated.service
    
           /usr/lib/systemd/systemd-sysupdated
    


## DESCRIPTION



           **systemd-sysupdated** is a system service that allows unprivileged
           clients to update the system. It works by scanning the system for
           updateable "targets" (i.e. portable services, sysexts, sysupdate
           components, etc.) and exposing them on the bus. Each target then
           has methods that translate directly into invocations of
           systemd-sysupdate(8).
    
           See org.freedesktop.sysupdate1(5) and
           org.freedesktop.LogControl1(5) for a description of the D-Bus API.
    


* * *
# setsebool

## NAME



           setsebool - set SELinux boolean value
    


## SYNOPSIS



           **setsebool** _[ -PNV ] boolean value | bool1=val1 bool2=val2 ..._
    


## DESCRIPTION



           **setsebool** sets the current state of a particular SELinux boolean
           or a list of booleans to a given value. The value may be 1 or true
           or on to enable the boolean, or 0 or false or off to disable it.
    
           Without the -P option, only the current boolean value is affected;
           the boot-time default settings are not changed.
    
           If the -P option is given, all pending values are written to the
           policy file on disk. So they will be persistent across reboots.
    
           If the -N option is given, the policy on disk is not reloaded into
           the kernel.
    
           If the -V option is given, verbose error messages will be printed
           from semanage libraries.
    


## EXAMPLE



           Enable container_use_devices boolean (will return to persistent value after reboot)
           # setsebool container_use_devices 1
           Persistently enable samba_create_home_dirs and samba_enable_home_dirs booleans
           # setsebool -P samba_create_home_dirs=on samba_enable_home_dirs=on
    


* * *
# restorecond

## NAME



           restorecond - daemon that watches for file creation and then sets
           the default SELinux file context
    


## SYNOPSIS



           **restorecond [-d] [-h] [-f restorecond_file ] [-u] [-v]**
    


## DESCRIPTION



           This manual page describes the **restorecond** program.
    
           This daemon uses inotify to watch files listed in the
           /etc/selinux/restorecond.conf, when they are created, this daemon
           will make sure they have the correct file context associated with
           the policy.
    


## OPTIONS



           **-d** Turns on debugging mode.   Application will stay in the
                  foreground and lots of debugs messages start printing.
    
           **-h** Print usage statement.
    
           **-f restorecond_file**
                  Use alternative restorecond.conf file.
    
           **-u** Turns on user mode.  Runs restorecond in the user session
                  and reads /etc/selinux/restorecond_user.conf.  Uses dbus to
                  make sure only one restorecond is running per user session.
    
           **-v** Turns on verbose debugging.  (Report missing files)
    


## FILES



           /etc/selinux/restorecond.conf /etc/selinux/restorecond_user.conf
    


* * *
# nfsdclddb

## NAME



           nfsdclddb - Tool for manipulating the nfsdcld sqlite database
    


## SYNOPSIS



           **nfsdclddb**[**-h** |**--help**]
    
           **nfsdclddb**[**-p** |**--path** _dbpath_] **fix-table-names**[**-h** |**--help**]
    
           **nfsdclddb**[**-p** |**--path** _dbpath_] **downgrade-schema**[**-h** |**--help**]
           [**-v** |**--version** _to-version_]
    
           **nfsdclddb**[**-p** |**--path** _dbpath_] **print**[**-h** |**--help**] [**-s** |**--summary**]
    


## DESCRIPTION



           The **nfsdclddb** command is provided to perform some manipulation of
           the nfsdcld sqlite database schema and to print the contents of
           the database.
    
       **Sub-commands**
           Valid **nfsdclddb** subcommands are:
    
           **fix-table-names**
                  A previous version of nfsdcld(8) contained a bug that
                  corrupted the reboot epoch table names.  This sub-command
                  will fix those table names.
    
           **downgrade-schema**
                  Downgrade the database schema.  Currently the schema can
                  only to downgraded from version 4 to version 3.
    
           **print** Display the contents of the database.  Prints the schema
                  version and the values of the current and recovery epochs.
                  If the **-s** |**--summary** option is not given, also prints the
                  clients in the reboot epoch tables.
    


## OPTIONS



       **Options valid for all sub-commands**
           **-h, --help**
                  Show the help message and exit
    
           **-p** _dbpath_ , **--path** _dbpath_
                  Open the sqlite database located at _dbpath_ instead of
                  _/var/lib/nfs/nfsdcld/main.sqlite_.  This is mainly for
                  testing purposes.
    
       **Options specific to the downgrade-schema sub-command**
           **-v** _to-version_ , **--version** _to-version_
                  The schema version to downgrade to.  Currently the schema
                  can only be downgraded to version 3.
    
       **Options specific to the print sub-command**
           **-s, --summary**
                  Do not list the clients in the reboot epoch tables in the
                  output.
    


## NOTES



           The **nfsdclddb** command will not allow the **fix-table-names** or
           **downgrade-schema** subcommands to be used if nfsdcld(8) is running.
    


## FILES



           **/var/lib/nfs/nfsdcld/main.sqlite**
    


* * *