tripathysagar/man_text huggingface dataset:
# cmirrord

## NAME



           cmirrord — cluster mirror log daemon
    


## SYNOPSIS



           **cmirrord**[**-f** |**--foreground**] [**-h** |**--help**]
    


## DESCRIPTION



           **cmirrord** is  the  daemon  that tracks mirror log information in a
           cluster.  It is specific to device-mapper based  mirrors  (and  by
           extension, LVM cluster mirrors).  Cluster mirrors are not possible
           without this daemon running.
    
           This daemon relies on the cluster infrastructure provided by coro‐
           sync,  which  must  be set up and running in order for cmirrord to
           function.
    
           Output is logged via syslog(3). The **SIGUSR1 signal**(7) can  be  is‐
           sued  to  **cmirrord** to gather current status information for debug‐
           ging purposes.
    
           Once started, **cmirrord** will run until it is  shutdown  via  **SIGINT**
           signal.  If  there  are still active cluster mirrors, however, the
           signal will be ignored. Active cluster mirrors should be  shutdown
           before stopping the cluster mirror log daemon.
    


## OPTIONS



           **-f** |**--foreground**
                  Do not fork and log to the terminal.
    
           **-h** |**--help**
                  Print usage.
    


* * *
# xtables-legacy

## NAME



           xtables-legacy — iptables using old getsockopt/setsockopt-based
           kernel api
    


## DESCRIPTION



           **xtables-legacy** are the original versions of iptables that use old
           getsockopt/setsockopt-based kernel interface.  This kernel
           interface has some limitations, therefore iptables can also be
           used with the newer nf_tables based API.  See xtables-nft(8) for
           information about the xtables-nft variants of iptables.
    


## USAGE



           The xtables-legacy-multi binary can be linked to the traditional
           names:
    
                /sbin/iptables -> /sbin/iptables-legacy-multi
                /sbin/ip6tables -> /sbin/ip6tables-legacy-multi
                /sbin/iptables-save -> /sbin/ip6tables-legacy-multi
                /sbin/iptables-restore -> /sbin/ip6tables-legacy-multi
    
           The iptables version string will indicate whether the legacy API
           (get/setsockopt) or the new nf_tables API is used:
                iptables -V
                iptables v1.7 (legacy)
    


## LIMITATIONS



           When inserting a rule using iptables -A or iptables -I, iptables
           first needs to retrieve the current active ruleset, change it to
           include the new rule, and then commit back the result.  This means
           that if two instances of iptables are running concurrently, one of
           the updates might be lost.  This can be worked around partially
           with the --wait option.
    
           There is also no method to monitor changes to the ruleset, except
           periodically calling iptables-legacy-save and checking for any
           differences in output.  xtables-monitor(8) will need the
           xtables-nft(8) versions to work, it cannot display changes made
           using the **iptables-legacy** tools.
    


* * *
# gensprep

## NAME



           **gensprep** - compile StringPrep data from files filtered by
           filterRFC3454.pl
    


## SYNOPSIS



           **gensprep**[ **-h** , **-?** , **--help**] [ **-v** , **--verbose**] [ **-c** , **--copyright**]
           [ **-s** , **--sourcedir** _source_ ] [ **-d** , **--destdir** _destination_ ]
    


## DESCRIPTION



           **gensprep** reads filtered RFC 3454 files and compiles their
           information into a binary form.  The resulting file, **< name>.icu**,
           can then be read directly by ICU, or used by **pkgdata**(8) for
           incorporation into a larger archive or library.
    
           The files read by **gensprep** are described in the **FILES** section.
    


## OPTIONS



           **-h** , **-?** , **--help**
                  Print help about usage and exit.
    
           **-v** , **--verbose**
                  Display extra informative messages during execution.
    
           **-c** , **--copyright**
                  Include a copyright notice into the binary data.
    
           **-s** , **--sourcedir** _source_
                  Set the source directory to _source_.  The default source
                  directory is specified by the environment variable
                  **ICU_DATA**.
    
           **-d** , **--destdir** _destination_
                  Set the destination directory to _destination_.  The default
                  destination directory is specified by the environment
                  variable **ICU_DATA**.
    


## ENVIRONMENT



           **ICU_DATA**
                  Specifies the directory containing ICU data. Defaults to
                  **${prefix}/share/icu/76.0.1/**.  Some tools in ICU depend on
                  the presence of the trailing slash. It is thus important to
                  make sure that it is present if **ICU_DATA** is set.
    


## FILES



           The following files are read by **gensprep** and are looked for in the
           _source_ /misc for rfc3454_*.txt files and in _source_ /unidata for
           NormalizationCorrections.txt.
    
           **rfc3453_A_1.txt**
                  Contains the list of unassigned codepoints in Unicode
                  version 3.2.0....
    
           **rfc3454_B_1.txt**
                  Contains the list of code points that are commonly mapped
                  to nothing....
    
           **rfc3454_B_2.txt**
                  Contains the list of mappings for casefolding of  code
                  points when Normalization form NFKC is specified....
    
           **rfc3454_C_X.txt**
                  Contains the list of code points that are prohibited for
                  IDNA.
    
           **NormalizationCorrections.txt**
                  Contains the list of code points whose normalization has
                  changed since Unicode Version 3.2.0.
    


## VERSION



           76.0.1
    


* * *
# ctrlaltdel

## NAME



           ctrlaltdel - set the function of the Ctrl-Alt-Del combination
    


## SYNOPSIS



           **ctrlaltdel hard** |**soft**
    


## DESCRIPTION



           Based on examination of the _linux/kernel/reboot.c_ code, it is
           clear that there are two supported functions that the
           <Ctrl-Alt-Del> sequence can perform.
    
           **hard**
               Immediately reboot the computer without calling sync(2) and
               without any other preparation. This is the default.
    
           **soft**
               Make the kernel send the **SIGINT**(interrupt) signal to the **init**
               process (this is always the process with PID 1). If this
               option is used, the **init**(8) program must support this feature.
               Since there are now several **init**(8) programs in the Linux
               community, please consult the documentation for the version
               that you are currently using.
    
           When the command is run without any argument, it will display the
           current setting.
    
           The function of **ctrlaltdel** is usually set in the _/etc/rc.local_
           file.
    


## OPTIONS



           **-h** , **--help**
               Display help text and exit.
    
           **-V** , **--version**
               Display version and exit.
    


## FILES



           _/etc/rc.local_
    


## AVAILABILITY



           The **ctrlaltdel** command is part of the util-linux package which can
           be downloaded from Linux Kernel Archive
           <https://www.kernel.org/pub/linux/utils/util-linux/>. This page is
           part of the _util-linux_ (a random collection of Linux utilities)
           project. Information about the project can be found at 
           ⟨https://www.kernel.org/pub/linux/utils/util-linux/⟩. If you have a
           bug report for this manual page, send it to
           util-linux@vger.kernel.org. This page was obtained from the
           project's upstream Git repository
           ⟨git://git.kernel.org/pub/scm/utils/util-linux/util-linux.git⟩ on
           2025-08-11. (At that time, the date of the most recent commit that
           was found in the repository was 2025-08-05.) If you discover any
           rendering problems in this HTML version of the page, or you
           believe there is a better or more up-to-date source for the page,
           or you have corrections or improvements to the information in this
           COLOPHON (which is _not_ part of the original manual page), send a
           mail to man-pages@man7.org
    
    util-linux 2.42-start-521-ec46  2025-08-09                  _CTRLALTDEL_(8)
    


* * *
# avcstat

## NAME



           avcstat - Display SELinux AVC statistics
    


## SYNOPSIS



           **avcstat**[**-c**] [**-f** _status_file_] [_interval_]
    


## DESCRIPTION



           Display SELinux AVC statistics.  If the _interval_ parameter is
           specified, the program will loop, displaying updated statistics
           every _interval_ seconds.  Relative values are displayed by default.
    


## OPTIONS



           **-c** Display the cumulative values.
    
           **-f** Specifies the location of the AVC statistics file,
                  defaulting to _/sys/fs/selinux/avc/cache_stats_.
    


* * *
# pam_permit

## NAME



           pam_permit - The promiscuous module
    


## SYNOPSIS



    
           **pam_permit.so**
    


## DESCRIPTION



           pam_permit is a PAM module that always permit access. It does
           nothing else.
    
           In the case of authentication, the user's name will be set to
           _nobody_ if the application didn't set one. Many applications and
           PAM modules become confused if this name is unknown.
    
           This module is very dangerous. It should be used with extreme
           caution.
    


## OPTIONS



           This module does not recognise any options.
    


## MODULE TYPES PROVIDED



           The **auth** , **account** , **password** and **session** module types are provided.
    


## RETURN VALUES



           PAM_SUCCESS
               This module always returns this value.
    


## EXAMPLES



           Add this line to your other login entries to disable account
           management, but continue to permit users to log in.
    
               account  required  pam_permit.so
    


* * *
# convertquota

## NAME



           convertquota - convert quota from old file format to new one
    


## SYNOPSIS



           **convertquota**[ **-ug**] **-e** _filesystem_
    
           **convertquota**[ **-ug**] **-f** _oldformat_ ,_newformat filesystem_
    


## DESCRIPTION



           **convertquota** converts old quota files **quota.user** and **quota.group**
           to files **aquota.user** and **aquota.group** in new format currently used
           by 2.4.0-ac? and newer or by SuSE or Red Hat Linux 2.4 kernels on
           _filesystem_.
    
           New file format allows using quotas for 32-bit uids / gids,
           setting quotas for root, accounting used space in bytes (and so
           allowing use of quotas in ReiserFS) and it is also architecture
           independent. This format introduces Radix Tree (a simple form of
           tree structure) to quota file.
    


## OPTIONS



           **-u, --user**
                  convert user quota file. This is the default.
    
           **-g, --group**
                  convert group quota file.
    
           **-f, --convert-format** _oldformat,newformat_
                  convert quota file from _oldformat_ to _newformat_.
    
           **-e, --convert-endian**
                  convert vfsv0 file format from big endian to little endian
                  (old kernels had a bug and did not store quota files in
                  little endian format).
    
           **-V, --version**
                  print version information.
    


## FILES



           **aquota.user**
                  new user quota file
    
           **aquota.group**
                  new group quota file
    


* * *
# ssh-pkcs11-helper

## NAME



           **ssh-pkcs11-helper** — OpenSSH helper for PKCS#11 support
    


## SYNOPSIS



           **ssh-pkcs11-helper**[**-v**]
    


## DESCRIPTION



           **ssh-pkcs11-helper** is used by _ssh_(1), _ssh-agent_(1), and
           _ssh-keygen_(1) to access keys provided by a PKCS#11 token.
    
           **ssh-pkcs11-helper** is not intended to be invoked directly by the
           user.
    
           A single option is supported:
    
           **-v** Verbose mode.  Causes **ssh-pkcs11-helper** to print debugging
                   messages about its progress.  This is helpful in debugging
                   problems.  Multiple **-v** options increase the verbosity.
                   The maximum is 3.
    
                   Note that _ssh_(1), _ssh-agent_(1), and _ssh-keygen_(1) will
                   automatically pass the **-v** flag to **ssh-pkcs11-helper** when
                   they have themselves been placed in debug mode.
    


* * *
# tipc-nametable

## NAME



           tipc-nametable - show TIPC nametable
    


## SYNOPSIS



           **tipc nametable show**
    


## OPTIONS



           Options (flags) that can be passed anywhere in the command chain.
    
           **-h** , **--help**
    
           **-j** , **-json**
                  Output results in JavaScript Object Notation (JSON).
    
           **-p** , **-pretty**
                  The default JSON format is compact and more efficient to
                  parse but hard for most users to read.  This flag adds
                  indentation for readability.
    
                  Show help about last valid command. For example **tipc**
                  **nametable --help** will show nametable help and **tipc --help**
                  will show general help. The position of the option in the
                  string is irrelevant.
    


## DESCRIPTION



           The nametable shows TIPC publication information.
    
       **Nametable format**
           **Type**
                  The 32-bit type field of the port name. The type field
                  often indicates the class of service provided by a port.
    
           **Lower**
                  The lower bound of the 32-bit instance field of the port
                  name.  The instance field is often used as a sub-class
                  indicator.
    
           **Upper**
                  The upper bound of the 32-bit instance field of the port
                  name.  The instance field is often used as a sub-class
                  indicator.  A difference in **lower** and **upper** means the
                  socket is bound to the port name range [lower,upper]
    
           **Port Identity**
                  The unique socket (port) identifier within the TIPC
                  cluster. The **port identity** consists of a node identity
                  followed by a socket reference number.
    
           **Publication**
                  The **publication** ID is a random number used internally to
                  represent a publication.
    
           **Scope**
                  The publication **scope** specifies the visibility of a bound
                  port name.  The **scope** can be specified to comprise three
                  different domains: **node** , **cluster** and **zone.** Applications
                  residing within the specified **scope** can see and access the
                  port using the displayed port name.
    


## EXIT STATUS



           Exit status is 0 if command was successful or a positive integer
           upon failure.
    


* * *
# tipc-peer

## NAME



           tipc-peer - modify peer information
    


## SYNOPSIS



           **tipc peer remove address** _ADDRESS_
    


## OPTIONS



           Options (flags) that can be passed anywhere in the command chain.
    
           **-h** , **--help**
                  Show help about last valid command. For example **tipc peer**
                  **--help** will show peer help and **tipc --help** will show
                  general help. The position of the option in the string is
                  irrelevant.
    


## DESCRIPTION



       **Peer remove**
           Remove an offline peer node from the local data structures. The
           peer is identified by its **address**
    


## EXIT STATUS



           Exit status is 0 if command was successful or a positive integer
           upon failure.
    


* * *
# xfs_mdrestore

## NAME



           xfs_mdrestore - restores an XFS metadump image to a filesystem
           image
    


## SYNOPSIS



           **xfs_mdrestore**[ **-gi**] [ **-l** _logdev_ ] [ **-r** _rtdev_ ] _source target_
           **xfs_mdrestore -i**[ **-l** _logdev_ ] [ **-r** _rtdev_ ] _source_
           **xfs_mdrestore -V**
    


## DESCRIPTION



           **xfs_mdrestore** is a debugging tool that restores a metadata image
           generated by xfs_metadump(8) to a filesystem. The _source_ argument
           specifies the location of the metadump image and the _target_
           argument specifies the destination for the filesystem image.  If
           the _source_ is -, then the metadata image is read from stdin. This
           allows the output of be another program such as a compression
           application to be redirected to **xfs_mdrestore**.  The _target_ can be
           either a file or a device.
    
           **xfs_mdrestore** should not be used to restore metadata onto an
           existing filesystem unless you are completely certain the _target_
           can be destroyed.
    


## OPTIONS



           **-g** Shows restore progress on stdout.
    
           **-i** Shows metadump information on stdout.  If no _target_ is
                  specified, exits after displaying information.  Older
                  metadumps man not include any descriptive information.
    
           **-l** _logdev_
                  Metadump in v2 format can contain metadata dumped from an
                  external log.  In such a scenario, the user has to provide
                  a device to which the log device contents from the metadump
                  file are copied.
    
           **-r** _rtdev_
                  Restore realtime device metadata to this device.  This is
                  only required for a metadump in v2 format.
    
           **-V** Prints the version number and exits.
    


## DIAGNOSTICS



           **xfs_mdrestore** returns an exit code of 0 if all the metadata is
           successfully restored or 1 if an error occurs.
    


## BUGS



           Email bug reports to **linux-xfs@vger.kernel.org**.
    


* * *
# ovs-kmod-ctl

## NAME



           ovs-kmod-ctl - OVS startup helper script for loading kernel
           modules
    


## SYNOPSIS



           **ovs-kmod-ctl insert**
           **ovs-kmod-ctl remove**
           **ovs-kmod-ctl help** | **-h** | **--help**
           **ovs-kmod-ctl --version**
           **ovs-kmod-ctl version**
    


## DESCRIPTION



           The **ovs-kmod-ctl** program is responsible for inserting and removing
           Open vSwitch kernel modules.  It is not meant to be invoked
           directly by system administrators but to be called internally by
           system startup scripts.  The script is used as part of an SELinux
           transition domain.
    
           Each of **ovs-kmod-ctl** 's commands is described separately below.
    


## The ``insert'' command



           The **insert** command loads the Open vSwitch kernel modules, if
           needed.  If this fails, and the Linux bridge module is loaded but
           no bridges exist, it tries to unload the bridge module and tries
           loading the Open vSwitch kernel module again.
    


## The ``remove'' command



           The **remove** command unloads the Open vSwitch kernel module
           (including the bridge compatibility module, if loaded) and any
           associated vport modules.
    


## EXIT STATUS



           **ovs-kmod-ctl** exits with status 0 on success and nonzero on
           failure.  The **insert** command is considered to succeed if kernel
           modules are already loaded; the **remove** command is considered to
           succeed if none of the kernel modules are loaded.
    


## ENVIRONMENT



           The following environment variables affect **ovs-kmod-ctl** :
    
           **PATH   ovs-kmod-ctl** does not hardcode the location of any of the
                  programs that it runs.  **ovs-kmod-ctl** will add the _sbindir_
                  and _bindir_ that were specified at **configure** time to **PATH** ,
                  if they are not already present.
    
           **OVS_LOGDIR**
           **OVS_RUNDIR**
           **OVS_DBDIR**
           **OVS_SYSCONFDIR**
           **OVS_PKGDATADIR**
           **OVS_BINDIR**
           **OVS_SBINDIR**
                  Setting one of these variables in the environment overrides
                  the respective **configure** option, both for **ovs-kmod-ctl**
                  itself and for the other Open vSwitch programs that it
                  runs.
    


## FILES



           **ovs-kmod-ctl** uses the following files:
    
           **ovs-lib**
                  Shell function library used internally by **ovs-kmod-ctl**.  It
                  must be installed in the same directory as **ovs-kmod-ctl**.
    


## EXAMPLE



           **ovs-kmod-ctl** isn't intended to be manually executed.  However, the
           following examples demonstrate loading the kernel modules.
    
           **ovs-kmod-ctl** insert
                  Attempts to insert the Open vSwitch kernel modules.
    
           **ovs-kmod-ctl** remove
                  Attempts to remove the Open vSwitch kernel modules.
    


* * *
# systemd-localed.service

## NAME



           systemd-localed.service, systemd-localed - Locale bus mechanism
    


## SYNOPSIS



           systemd-localed.service
    
           /usr/lib/systemd/systemd-localed
    


## DESCRIPTION



           systemd-localed.service is a system service that may be used as
           mechanism to change the system locale settings, as well as the
           console key mapping and default X11 key mapping.  systemd-localed
           is automatically activated on request and terminates itself when
           it is unused.
    
           The tool localectl(1) is a command line client to this service.
    
           See org.freedesktop.locale1(5) and org.freedesktop.LogControl1(5)
           for a description of the D-Bus API.
    


* * *
# ip-token

## NAME



           ip-token - tokenized interface identifier support
    


## SYNOPSIS



           **ip token**{ _COMMAND_ | **help**}
    
           **ip token set** _TOKEN_ **dev** _DEV_
    
           **ip token del dev** _DEV_
    
           **ip token get**[ **dev** _DEV_ ]
    
           **ip token**[ **list**]
    


## DESCRIPTION



           IPv6 tokenized interface identifier support is used for assigning
           well-known host-part addresses to nodes whilst still obtaining a
           global network prefix from Router advertisements. The primary
           target for tokenized identifiers are server platforms where
           addresses are usually manually configured, rather than using
           DHCPv6 or SLAAC. By using tokenized identifiers, hosts can still
           determine their network prefix by use of SLAAC, but more readily
           be automatically renumbered should their network prefix change
           [1]. Tokenized IPv6 Identifiers are described in the draft [1]:
           <draft-chown-6man-tokenised-ipv6-identifiers-02>.
    
       **ip token set - set an interface token**
           set the interface token to the kernel.
    
           _TOKEN_  the interface identifier token address.
    
           **dev** _DEV_
                  the networking interface.
    
       **ip token del - delete an interface token**
           delete the interface token from the kernel.
    
           **dev** _DEV_
                  the networking interface.
    
       **ip token get - get the interface token from the kernel**
           show a tokenized interface identifier of a particular networking
           device.  **Arguments:** coincide with the arguments of **ip token set**
           but the _TOKEN_ must be left out.
    
       **ip token list - list all interface tokens**
           list all tokenized interface identifiers for the networking
           interfaces from the kernel.
    


* * *
# sepolicy-communicate

## NAME



           sepolicy-communicate - Generate a report showing if two SELinux
           Policy Domains can communicate
    


## SYNOPSIS



           **sepolicy communicate [-h] -s SOURCE -t TARGET [-c TCLASS] [-S**
           **SOURCEACCESS] [-T TARGETACCESS]**
    


## DESCRIPTION



           Use **sepolicy communicate** to examine SELinux Policy and determine
           if a source SELinux Domain can communicate with a target SELinux
           Domain.  The default command looks to see if there are any file
           types that the source domain can write, which the target domain
           can read.
    


## OPTIONS



           _-c, --class_
                  Specify the SELinux class which the source domain will
                  attempt to communicate with the target domain.  (Default
                  file)
    
           _-h, --help_
                  Display help message
    
           _-s, --source_
                  Specify the source SELinux domain type.
    
           _-S, --sourceaccess_
                  Specify the list of accesses used by the source SELinux
                  domain type to communicate with the target domain. Default
                  Open, Write.
    
           _-t, --target_
                  Specify the target SELinux domain type.
    
           _-T, --targetaccess_
                  Specify the list of accesses used by the target SELinux
                  domain type to receive communications from the source
                  domain. Default Open, Read.
    


## EXAMPLE



           List types that can be used to communicate between samba daemon and apache server
           # sepolicy communicate -s httpd_t -t smbd_t
           Consider a type to be accessible by the source domain when it can be opened and appended to (as opposed to opened and written to)
           # sepolicy communicate -s httpd_t -t smbd_t -S open,append
    


* * *
# yum-complete-transaction

## NAME



           yum-complete-transaction - attempt to complete failed or aborted
           Yum transactions
    


## SYNOPSIS



           **yum-complete-transaction**[options]
    


## GENERAL OPTIONS



           **-h, --help**
                  Help; display a help message and then quit.
    
           **--cleanup-only**
                  Only clean up only transaction journal files and exit.
    


## DESCRIPTION



           **yum-complete-transaction** is a program which finds incomplete or
           aborted yum transactions on a system and attempts to complete
           them. It looks at the transaction-all* and transaction-done* files
           which can normally be found in /var/lib/yum if a yum transaction
           aborted in the middle of execution.
    
           If it finds more than one unfinished transaction it will attempt
           to complete the most recent one first. You can run it more than
           once to clean up all unfinished transactions.
    


## FILES



           As yum-complete-transaction uses YUM libraries for retrieving all
           the information, it relies on YUM configuration for its default
           values like which repositories to use. Consult YUM documentation
           for details:
    
           /etc/yum.conf
           /etc/yum/repos.d/
           /var/cache/yum/
    


## BUGS



           There are of course no bugs, but should you find any, you should
           first consult the FAQ section on http://yum.baseurl.org/wiki/Faq
           and if unsuccessful in finding a resolution contact the mailing
           list: yum-devel@lists.baseurl.org.  To file a bug use
           http://bugzilla.redhat.com for Fedora/RHEL/Centos related bugs and
           http://yum.baseurl.org/report for all other bugs.
    


* * *
# dcb-apptrust

## NAME



           dcb-apptrust - show / configure per-selector trust and trust order
           of the application priority table of the DCB (Data Center
           Bridging) subsystem.
    


## SYNOPSIS



           **dcb**[ _OPTIONS_ ] **apptrust**{ _COMMAND_ | _help_ }
    
           **dcb apptrust show dev** DEV [ **order**]
    
           **dcb apptrust set dev** DEV [ **order** _SEL-LIST_ ]
    
           _SEL-LIST_ := [ _SEL-LIST_ ] _SEL_
    
           _SEL_ := { _ethtype_ | _stream-port_ | _dgram-port_ | _port_ | _dscp_ | _pcp_ }
    


## DESCRIPTION



           **dcb apptrust** is used to configure per-selector trust and trust
           order of the Application Priority Table, see dcb-app(8) for
           details on how to configure app table entries.
    
           Selector trust can be used by the software stack, or drivers (most
           likely the latter), when querying the APP table, to determine if
           an APP entry should take effect, or not. Additionally, the order
           of the trusted selectors will dictate which selector should take
           precedence, in the case of multiple different APP table selectors
           being present.
    


## COMMANDS



           **show** Display all trusted selectors.
    
           **set** Set new list of trusted selectors. Empty list is
                  effectively the same as removing trust entirely.
    


## PARAMETERS



           The following describes only the write direction, i.e. as used
           with the **set** command. For the **show** command, the parameter name is
           to be used as a simple keyword without further arguments. This
           instructs the tool to show the values of a given parameter.
    
           **order** _SEL-LIST_
                  _SEL-LIST_ is a space-separated list of selector names.
                  Possible selector values are: **ethtype, stream-port, dgram-**
                  **port, port, dscp,** and **pcp**
    


## EXAMPLE & USAGE



           Set trust order to: dscp, pcp for eth0:
    
           # dcb apptrust set dev eth0 order dscp pcp
    
           Set trust order to: port (stream or dgram), pcp, ethtype for eth1:
    
           # dcb apptrust set dev eth1 order port pcp ethtype
    
           Show what was set:
    
           # dcb apptrust show dev eth0
           order: port pcp ethtype
    


## EXIT STATUS



           Exit status is 0 if command was successful or a positive integer
           upon failure.
    


* * *
# ibprintca

## NAME



           ibprintca.pl - print either the ca specified or the list of cas
           from the ibnetdiscover output
    


## SYNOPSIS



           **ibprintca.pl**[-R -l -C <ca_name> -P <ca_port>]
           [<ca_guid|node_name>]
    


## DESCRIPTION



           Faster than greping/viewing with an editor the output of
           ibnetdiscover, ibprintca.pl will parse out and print either the CA
           information for the specified CA or a list of all the CAs in the
           subnet.
    
           Finally, ibprintca.pl will also reuse the cached ibnetdiscover
           output from some of the other diag tools which makes it a bit
           faster than running ibnetdiscover from scratch.
    


## OPTIONS



           **-l** List the CAs (simply a wrapper for ibhosts).
    
           **-R** Recalculate the ibnetdiscover information, ie do not use
                  the cached information.  This option is slower but should
                  be used if the diag tools have not been used for some time
                  or if there are other reasons to believe that the fabric
                  has changed.
    
           **-C <ca_name>    **use the specified ca_name for the search.
    
           **-P <ca_port>    **use the specified ca_port for the search.
    


* * *
# systemd-udev-settle.service

## NAME



           systemd-udev-settle.service - Wait for all pending udev events to
           be handled
    


## SYNOPSIS



           systemd-udev-settle.service
    


## DESCRIPTION



           This service calls **udevadm settle** to wait until all events that
           have been queued by udev(7) have been processed. It is a crude way
           to wait until "all" hardware has been discovered. Services may
           pull in this service and order themselves after it to wait for the
           udev queue to be empty.
    
           _Using this service is not recommended._  There can be no guarantee
           that hardware is fully discovered at any specific time, because
           the kernel does hardware detection asynchronously, and certain
           buses and devices take a very long time to become ready, and also
           additional hardware may be plugged in at any time. Instead,
           services should subscribe to udev events and react to any new
           hardware as it is discovered. Services that, based on
           configuration, expect certain devices to appear, may warn or
           report failure after a timeout. This timeout should be tailored to
           the hardware type. Waiting for systemd-udev-settle.service usually
           slows boot significantly, because it means waiting for all
           unrelated events too.
    


* * *
# pam_faildelay

## NAME



           pam_faildelay - Change the delay on failure per-application
    


## SYNOPSIS



    
           **pam_faildelay.so**[debug] [delay=_microseconds_]
    


## DESCRIPTION



           pam_faildelay is a PAM module that can be used to set the delay on
           failure per-application.
    
           If no **delay** is given, pam_faildelay will use the value of
           FAIL_DELAY from /etc/login.defs.
    


## OPTIONS



           **debug**
               Turns on debugging messages sent to syslog.
    
           **delay=**_N_
               Set the delay on failure to N microseconds.
    


## MODULE TYPES PROVIDED



           Only the **auth** module type is provided.
    


## RETURN VALUES



           PAM_IGNORE
               Delay was successful adjusted.
    
           PAM_SYSTEM_ERR
               The specified delay was not valid.
    


## EXAMPLES



           The following example will set the delay on failure to 10 seconds:
    
               auth  optional  pam_faildelay.so  delay=10000000
    


* * *
# rpc.rquotad

## NAME



           rpc.rquotad - remote quota server
    


## SYNOPSIS



           **/usr/sbin/rpc.rquotad**[ **-FI**] [ **-p** _port_ ] [ **-s** | **-S**] [ **-x** _path_ ]
    
           **/usr/sbin/rpc.rquotad**[ **-h** | **-V**]
    


## DESCRIPTION



           **rpc.rquotad** is an rpc(3) server which returns quotas for a user of
           a local filesystem which is mounted by a remote machine over the
           NFS.  It also allows setting of quotas on NFS mounted filesystem
           (if configured during compilation and allowed by a command line
           option **-S**).  The results are used by quota(1) to display user
           quotas for remote filesystems and by edquota(8) to set quotas on
           remote filesystems.  **rquotad** daemon uses tcp-wrappers library
           (under service name _rquotad_) which allows you to specify hosts
           allowed/disallowed to use the daemon (see **hosts.allow**(5) manpage
           for more information). The **rquotad** daemon is normally started at
           boot time from the system startup scripts.
    


## OPTIONS



           **-h, --help**
                  Show program usage and exit.  **-V, --version** Show version of
                  quota tools.
    
           **-s, --no-setquota**
                  Don't allow setting of quotas (default). This option is
                  available only if utilities were compiled with the
                  _rpcsetquota_ option.
    
           **-S, --setquota**
                  Allow setting of quotas. This option is available only if
                  utilities were compiled with the _rpcsetquota_ option.
    
           **-F, --foreground**
                  Run daemon in foreground (may be useful for debugging
                  purposes).
    
           **-I, --autofs**
                  Do not ignore autofs mountpoints.
    
           **-p** _port_**, --port** _port_
                  Listen on alternate port _port._
    
           **-x** _path_**, --xtab** _path_
                  Set an alternative file with NFSD export table. This file
                  is used to determine pseudoroot of NFSv4 exports. The
                  pseudoroot is then prepended to each relative path (i.e. a
                  path not beginning by '/') received in a quota RPC request.
    


## FILES



           **aquota.user or aquota.group**
                  quota file at the filesystem root (version 2 quota, non-XFS
                  filesystems)
           **quota.user or quota.group**
                  quota file at the filesystem root (version 1 quota, non-XFS
                  filesystems)
           **/etc/mtab**
                  default filesystems
    


* * *
# ip-addrlabel

## NAME



           ip-addrlabel - protocol address label management
    


## SYNOPSIS



           **ip addrlabel**{ _COMMAND_ | **help**}
    
           **ip addrlabel**{ **add** | **del**} **prefix PREFIX**[ **dev** _DEV_ ] [ **label**
                   _NUMBER_ ]
    
           **ip addrlabel**{ **list** | **flush**}
    


## DESCRIPTION



           IPv6 address labels are used for address selection; they are
           described in RFC 3484. Precedence is managed by userspace, and
           only the label itself is stored in the kernel.
    
       **ip addrlabel add - add an address label**
           add an address label entry to the kernel.
    
           **prefix** _PREFIX_
    
           **dev** _DEV_
                  the outgoing interface.
    
           **label** _NUMBER_
                  the label for the prefix.  0xffffffff is reserved.
    
       **ip addrlabel del - delete an address label**
           delete an address label entry from the kernel.  **Arguments:**
           coincide with the arguments of **ip addrlabel add** but the label is
           not required.
    
       **ip addrlabel list - list address labels**
           list the current address label entries in the kernel.
    
       **ip addrlabel flush - flush address labels**
           flush all address labels in the kernel. This does not restore any
           default settings.
    


* * *
# nameif

## NAME



           nameif - name network interfaces based on MAC addresses
    


## SYNOPSIS



           **nameif [-c configfile] [-s]**
           **nameif [-c configfile] [-s] {interface macaddress}**
    


## DESCRIPTION



           **nameif** renames network interfaces based on mac addresses. When no
           arguments are given _/etc/mactab_ is read. Each line  of it contains
           an interface name and a Ethernet MAC address. Comments are allowed
           starting with #.  Otherwise the interfaces specified on the
           command line are processed.  _nameif_ looks for the interface with
           the given MAC address and renames it to the name given.
    
           When the _-s_ argument is given all error messages go to the syslog.
    
           When the _-c_ argument is given with a file name that file is read
           instead of /etc/mactab.
    


## NOTES



           _nameif_ should be run before the interface is up, otherwise it'll
           fail.
    


## FILES



           /etc/mactab
    


## BUGS



           Only works for Ethernet currently.
    


* * *
# rpmsort

## NAME



           rpmsort - Sort input by RPM Package Manager (RPM) versioning
    


## SYNOPSIS



           **rpmsort** _FILES_
    


## DESCRIPTION



           rpmsort(8) sorts the input files, and writes a sorted list to
           standard out - like sort(1), but aware of RPM versioning.
    
           If '-' is given as an argument, or no arguments are given,
           versions are read from standard in and written to standard out.
    


## EXAMPLES



           **$ echo -e 'rpm-4.18.0-3.fc38.x86_64\nrpm-4.18.0-1.fc38.x86_64' |**
           **rpmsort**
           rpm-4.18.0-1.fc38.x86_64
           rpm-4.18.0-3.fc38.x86_64
    


* * *
# matchpathcon

## NAME



           matchpathcon - get the default SELinux security context for the
           specified path from the file contexts configuration
    


## SYNOPSIS



           **matchpathcon**[**-V**] [**-N**] [**-n**] [**-m** _type_] [**-f** _file_contexts_file_] [**-p**
           _prefix_] [**-P** _policy_root_path_] _filepath..._
    


## DESCRIPTION



           **matchpathcon** queries the system policy and outputs the default
           security context associated with the filepath.
    
           **Note:** Identical paths can have different security contexts,
           depending on the file type (regular file, directory, link file,
           char file ...).
    
           **matchpathcon** will also take the file type into consideration in
           determining the default security context if the file exists. If
           the file does not exist, no file type matching will occur.
    


## OPTIONS



           **-m** _type_
                  Force file type for the lookup.  Valid types are **file** , **dir** ,
                  **pipe** , **chr_file** , **blk_file** , **lnk_file** , **sock_file**
    
           **-n** Do not display path
    
           **-N** Do not use translations
    
           **-f** _file_context_file_
                  Use alternate file_context file
    
           **-p** _prefix_
                  Use prefix to speed up translations
    
           **-P** _policy_root_path_
                  Use alternate policy root path
    
           **-V** Verify file context on disk matches defaults
    


## EXAMPLE



           Show the default label of sock_file cups.sock
           # matchpathcon -m sock_file /var/run/cups/cups.sock
           Verify that /var/www/html directory is labeled correctly (the content of the folder is not checked)
           # matchpathcon -V /var/www/html
    


* * *
# xfs_rtcp

## NAME



           xfs_rtcp - XFS realtime copy command
    


## SYNOPSIS



           **xfs_rtcp**[ **-e** _extsize_ ] [ **-p**] _source_ ... _target_
           **xfs_rtcp -V**
    


## DESCRIPTION



           **xfs_rtcp** copies a file to the realtime partition on an XFS
           filesystem.  If there is more than one _source_ and _target_ , the
           final argument (the _target_) must be a directory which already
           exists.
    


## OPTIONS



           **-e** _extsize_
                  Sets the extent size of the destination realtime file.
    
           **-p** Use if the size of the source file is not an even multiple
                  of the block size of the destination filesystem. When **-p** is
                  specified **xfs_rtcp** will pad the destination file to a size
                  which is an even multiple of the filesystem block size.
                  This is necessary since the realtime file is created using
                  direct I/O and the minimum I/O is the filesystem block
                  size.
    
           **-V** Prints the version number and exits.
    


## CAVEATS



           Currently, realtime partitions are not supported under the Linux
           version of XFS, and use of a realtime partition **WILL CAUSE**
           **CORRUPTION** on the data partition. As such, this command is made
           available for curious **DEVELOPERS ONLY** at this point in time.
    


* * *
# chcat

## NAME



           chcat - change SELinux security categories of files/users
    


## SYNOPSIS



           **chcat** _category file_...
           **chcat -l** _category user_...
           **chcat** _[[+|-]category...]_  _file_...
           **chcat -l** _[[+|-]category...]_  _user_...
           **chcat**[_-d_] _file_...
           **chcat -l**[_-d_] _user_...
           **chcat** _-L_ [ -l ] [ user ... ]
    


## DESCRIPTION



           Use +/- to add/remove categories from a _file_ or _user_ (only a
           single category can be specified at a time). Or specify the
           desired list/range of categories to be applied (replacing the
           existing categories).
    
           **Note:** When removing a category you must specify '--' on the
           command line before using the -Category syntax. This tells the
           command that you have finished entering options and are now
           specifying a category name instead.
    
           **-d** delete all categories from given FILE/USER.
    
           **-L** list available categories.
    
           **-l** Tells chcat to operate on users instead of files.
    


## EXAMPLE



           Replace categories of user "test" with c0.c6
           # chcat -l c0.c6 test
           Add category c1023 to user "test"
           # chcat -l +c1023 test
           Remove category c5 from file "file"
           # chcat -- -c5 file
           Remove all categories from file "file"
           # chcat -d file
    


## FILES



           /etc/selinux/{SELINUXTYPE}/setrans.conf
           /etc/selinux/{SELINUXTYPE}/seusers
    


* * *
# setenforce

## NAME



           setenforce - modify the mode SELinux is running in
    


## SYNOPSIS



           **setenforce**[**Enforcing** |**Permissive** |**1** |**0**]
    


## DESCRIPTION



           Use **Enforcing** or **1** to put SELinux in enforcing mode.
           Use **Permissive** or **0** to put SELinux in permissive mode.
    
           If SELinux is disabled and you want to enable it, or SELinux is
           enabled and you want to disable it, please see selinux(8).
    


* * *
# ip-ntable

## NAME



           ip-ntable - neighbour table configuration
    


## SYNOPSIS



           **ip**[ _OPTIONS_ ] **ntable**{ _COMMAND_ | **help**}
    
           **ip ntable change name** _NAME_ [ **dev** _DEV_ ] [ **thresh1** _VAL_ ] [ **thresh2**
                   _VAL_ ] [ **thresh3** _VAL_ ] [ **gc_int** _MSEC_ ] [ **base_reachable**
                   _MSEC_ ] [ **retrans** _MSEC_ ] [ **gc_stale** _MSEC_ ] [ **delay_probe**
                   _MSEC_ ] [ **queue** _LEN_ ] [ **app_probs** _VAL_ ] [ **ucast_probes** _VAL_
                   ] [ **mcast_probes** _VAL_ ] [ **mcast_reprobes** _VAL_ ] [
                   **anycast_delay** _MSEC_ ] [ **proxy_delay** _MSEC_ ] [ **proxy_queue**
                   _LEN_ ] [ **locktime** _MSEC_ ]
    
           **ip ntable show**[ **dev** _DEV_ ] [ **name** _NAME_ ]
    


## DESCRIPTION



           _ip ntable_ controls the parameters for the neighbour tables.
    
       **ip ntable show - list the ip neighbour tables**
           This commands displays neighbour table parameters and statistics.
    
           **dev** _DEV_
                  only list the table attached to this device.
    
           **name** _NAME_
                  only lists the table with the given name.
    
       **ip ntable change - modify table parameter**
           This command allows modifying table parameters such as timers and
           queue lengths.
    
           **name** _NAME_
                  the name of the table to modify.
    
           **dev** _DEV_
                  the name of the device to modify the table values.
    


## EXAMPLES



           ip ntable show dev eth0
               Shows the neighbour table (IPv4 ARP and IPv6 ndisc) parameters
               on device eth0.
    
           ip ntable change name arp_cache queue 8 dev eth0
               Changes the number of packets queued while address is being
               resolved from the default value (3) to 8 packets.
    


* * *