tripathysagar/man_text huggingface dataset:
# sepolicy-network

## NAME



           sepolicy-network - Examine the SELinux Policy and generate a
           network report
    


## SYNOPSIS



           **sepolicy network [-h] (-l | -a application [application ...] | -p**
           **PORT [PORT ...] | -t TYPE [TYPE ...] | -d DOMAIN [DOMAIN ...])**
    


## DESCRIPTION



           Use **sepolicy network** to examine SELinux Policy and generate
           network reports.
    


## OPTIONS



           _-a, --application_
                  Generate a report listing the ports to which the specified
                  init application is allowed to connect and or bind
    
           _-d, --domain_
                  Generate a report listing the ports to which the specified
                  domain is allowed to connect and or bind
    
           _-l, --list_
                  List all Network Port Types defined in SELinux Policy
    
           _-h, --help_
                  Display help message
    
           _-t, --type_
                  Generate a report listing the port numbers associate with
                  the specified SELinux port type
    
           _-p, --port_
                  Generate a report listing the SELinux port types associate
                  with the specified port number
    


## EXAMPLES



           **sepolicy network -p 22**
           22: tcp ssh_port_t 22
           22: udp reserved_port_t 1-511
           22: tcp reserved_port_t 1-511
    
           **sepolicy network -a /usr/sbin/sshd**
           sshd_t: tcp name_connect
                111 (portmap_port_t)
                53 (dns_port_t)
                88, 750, 4444 (kerberos_port_t)
                9080 (ocsp_port_t)
                9180, 9701, 9443-9447 (pki_ca_port_t)
                32768-61000 (ephemeral_port_t)
                all ports < 1024 (reserved_port_type)
                all ports with out defined types (port_t)
           sshd_t: tcp name_bind
                22 (ssh_port_t)
                5900-5983, 5985-5999 (vnc_port_t)
                6000-6020 (xserver_port_t)
                32768-61000 (ephemeral_port_t)
                all ports > 500 and  < 1024 (rpc_port_type)
                all ports with out defined types (port_t)
           sshd_t: udp name_bind
                32768-61000 (ephemeral_port_t)
                all ports > 500 and  < 1024 (rpc_port_type)
                all ports with out defined types (port_t)
    


* * *
# pam_sepermit

## NAME



           pam_sepermit - PAM module to allow/deny login depending on SELinux
           enforcement state
    


## SYNOPSIS



    
           **pam_sepermit.so**[debug] [conf=_/path/to/config/file_]
    


## DESCRIPTION



           The pam_sepermit module allows or denies login depending on
           SELinux enforcement state.
    
           When the user which is logging in matches an entry in the config
           file he is allowed access only when the SELinux is in enforcing
           mode. Otherwise he is denied access. For users not matching any
           entry in the config file the pam_sepermit module returns
           PAM_IGNORE return value.
    
           The config file contains a list of user names one per line with
           optional arguments. If the _name_ is prefixed with _@_ character it
           means that all users in the group _name_ match. If it is prefixed
           with a _%_ character the SELinux user is used to match against the
           _name_ instead of the account name. Note that when SELinux is
           disabled the SELinux user assigned to the account cannot be
           determined. This means that such entries are never matched when
           SELinux is disabled and pam_sepermit will return PAM_IGNORE.
    
           See sepermit.conf(5) for details.
    


## OPTIONS



           **debug**
               Turns on debugging via syslog(3).
    
           **conf=**_/path/to/config/file_
               Path to alternative config file overriding the default.
    


## MODULE TYPES PROVIDED



           The **auth** and **account** module types are provided.
    


## RETURN VALUES



           PAM_AUTH_ERR
               SELinux is disabled or in the permissive mode and the user
               matches.
    
           PAM_SUCCESS
               SELinux is in the enforcing mode and the user matches.
    
           PAM_IGNORE
               The user does not match any entry in the config file.
    
           PAM_USER_UNKNOWN
               The module was unable to determine the user's name.
    
           PAM_SERVICE_ERR
               Error during reading or parsing the config file.
    


## FILES



           /etc/security/sepermit.conf
               Default configuration file
    


## EXAMPLES



               auth     [success=done ignore=ignore default=bad] pam_sepermit.so
               auth     required  pam_unix.so
               account  required  pam_unix.so
               session  required  pam_permit.so
    


* * *
# selinuxexeccon

## NAME



           selinuxexeccon - report SELinux context used for this executable
    


## SYNOPSIS



           **selinuxexeccon** _command_ [_fromcon_]
    


## DESCRIPTION



           **selinuxexeccon** reports the SELinux process context for the
           specified command from the specified context or the current
           context.
    


## EXAMPLE



           # selinuxexeccon /usr/bin/passwd
           staff_u:staff_r:passwd_t:s0-s0:c0.c1023
    
           # selinuxexeccon /usr/sbin/sendmail system_u:system_r:httpd_t:s0
           system_u:system_r:system_mail_t:s0
    


* * *
# resizepart

## NAME



           resizepart - tell the kernel about the new size of a partition
    


## SYNOPSIS



           **resizepart** _device partition length_
    


## DESCRIPTION



           **resizepart** tells the Linux kernel about the new size of the
           specified partition. The command is a simple wrapper around the
           "resize partition" ioctl.
    
           This command doesn’t manipulate partitions on a block device.
    


## PARAMETERS



           _device_
               The disk device.
    
           _partition_
               The partition number.
    
           _length_
               The new length of the partition (in 512-byte sectors).
    
           **-h** , **--help**
               Display help text and exit.
    
           **-V** , **--version**
               Display version and exit.
    


## AVAILABILITY



           The **resizepart** command is part of the util-linux package which can
           be downloaded from Linux Kernel Archive
           <https://www.kernel.org/pub/linux/utils/util-linux/>. This page is
           part of the _util-linux_ (a random collection of Linux utilities)
           project. Information about the project can be found at 
           ⟨https://www.kernel.org/pub/linux/utils/util-linux/⟩. If you have a
           bug report for this manual page, send it to
           util-linux@vger.kernel.org. This page was obtained from the
           project's upstream Git repository
           ⟨git://git.kernel.org/pub/scm/utils/util-linux/util-linux.git⟩ on
           2025-08-11. (At that time, the date of the most recent commit that
           was found in the repository was 2025-08-05.) If you discover any
           rendering problems in this HTML version of the page, or you
           believe there is a better or more up-to-date source for the page,
           or you have corrections or improvements to the information in this
           COLOPHON (which is _not_ part of the original manual page), send a
           mail to man-pages@man7.org
    
    util-linux 2.42-start-521-ec46  2025-08-09                  _RESIZEPART_(8)
    


* * *
# blkmapd

## NAME



           blkmapd - pNFS block layout mapping daemon
    


## SYNOPSIS



           **blkmapd [-h] [-d] [-f]**
    


## DESCRIPTION



           The **blkmapd** daemon performs device discovery and mapping for the
           parallel NFS (pNFS) block layout client [RFC5663].
    
           The pNFS block layout protocol builds a complex storage hierarchy
           from a set of _simple volumes._  These simple volumes are addressed
           by content, using a signature on the volume to uniquely name each
           one.  The daemon locates a volume by examining each block device
           in the system for the given signature.
    
           The topology typically consists of a hierarchy of volumes built by
           striping, slicing, and concatenating the simple volumes.  The
           **blkmapd** daemon uses the device-mapper driver to construct logical
           devices that reflect the server topology, and passes these devices
           to the kernel for use by the pNFS block layout client.
    


## OPTIONS



           **-h** Display usage message.
    
           **-d** Performs device discovery only then exits.
    
           **-f** Runs **blkmapd** in the foreground and sends output to stderr
                  (as opposed to syslogd)
    


## CONFIGURATION FILE



           The **blkmapd** daemon recognizes the following value from the
           **[general]** section of the _/etc/nfs.conf_ configuration file:
    
           **pipefs-directory**
                  Tells **blkmapd** where to look for the rpc_pipefs filesystem.
                  The default value is _/var/lib/nfs/rpc_pipefs_.
    


* * *
# ibclearcounters

## NAME



           ibclearcounters - clear port counters in IB subnet
    


## SYNOPSIS



           **ibclearcounters**[-h] [<topology-file> | -C ca_name -P ca_port
           -t(imeout) timeout_ms]
    


## DESCRIPTION



           ibclearcounters is a script that clears the PMA port counters by
           either walking the IB subnet topology or using an already saved
           topology file.
    


## OPTIONS



           -C <ca_name>    use the specified ca_name.
    
           -P <ca_port>    use the specified ca_port.
    
           -t <timeout_ms> override the default timeout for the solicited
           mads.
    


* * *
# semanage

## NAME



           semanage - SELinux Policy Management tool
    


## SYNOPSIS



           **semanage**
           **{import,export,login,user,port,interface,module,node,fcontext,boolean,permissive,dontaudit,ibpkey,ibendport}**
                           ...  **positional arguments:**
    
           **import** Import local customizations
    
           **export** Output local customizations
    
           **login** Manage login mappings between linux users and SELinux
           confined users
    
           **user** Manage SELinux confined users (Roles and levels for an
           SELinux user)
    
           **port** Manage network port type definitions
    
           **interface** Manage network interface type definitions
    
           **module** Manage SELinux policy modules
    
           **node** Manage network node type definitions
    
           **fcontext** Manage file context mapping definitions
    
           **boolean** Manage booleans to selectively enable functionality
    
           **permissive** Manage process type enforcement mode
    
           **dontaudit** Disable/Enable dontaudit rules in policy
    
           **ibpkey** Manage infiniband pkey type definitions
    
           **ibendport** Manage infiniband end port type definitions
    


## DESCRIPTION



           semanage is used to configure certain elements of SELinux policy
           without requiring modification to or recompilation from policy
           sources.  This includes the mapping from Linux usernames to
           SELinux user identities (which controls the initial security
           context assigned to Linux users when they login and bounds their
           authorized role set) as well as security context mappings for
           various kinds of objects, such as network ports, interfaces,
           infiniband pkeys and endports, and nodes (hosts) as well as the
           file context mapping. Note that the semanage login command deals
           with the mapping from Linux usernames (logins) to SELinux user
           identities, while the semanage user command deals with the mapping
           from SELinux user identities to authorized role sets.  In most
           cases, only the former mapping needs to be adjusted by the
           administrator; the latter is principally defined by the base
           policy and usually does not require modification.
    


## OPTIONS



           _-h, --help_
                  List help information
    


* * *
# logsave

## NAME



           logsave - save the output of a command in a logfile
    


## SYNOPSIS



           **logsave**[ **-asv**] _logfile cmd_prog [ ... ]_
    


## DESCRIPTION



           The **logsave** program will execute _cmd_prog_ with the specified
           argument(s), and save a copy of its output to _logfile_.  If the
           containing directory for _logfile_ does not exist, **logsave** will
           accumulate the output in memory until it can be written out.  A
           copy of the output will also be written to standard output.
    
           If _cmd_prog_ is a single hyphen ('-'), then instead of executing a
           program, **logsave** will take its input from standard input and save
           it in _logfile_
    
           **logsave** is useful for saving the output of initial boot scripts
           until the /var partition is mounted, so the output can be written
           to /var/log.
    


## OPTIONS



           **-a** This option will cause the output to be appended to
                  _logfile_ , instead of replacing its current contents.
    
           **-s** This option will cause **logsave** to skip writing to the log
                  file text which is bracketed with a control-A (ASCII 001 or
                  Start of Header) and control-B (ASCII 002 or Start of
                  Text).  This allows progress bar information to be visible
                  to the user on the console, while not being written to the
                  log file.
    
           **-v** This option will make **logsave** to be more verbose in its
                  output to the user.
    


* * *
# request-key

## NAME



           request-key - handle key instantiation callback requests from the
           kernel
    


## SYNOPSIS



           **/sbin/request-key** <op> <key> <uid> <gid> <threadring>
           <processring>      <sessionring> [<info>]
    


## DESCRIPTION



           This program is invoked by the kernel when the kernel is asked for
           a key that it doesn't have immediately available. The kernel
           creates a partially set up key and then calls out to this program
           to instantiate it. It is not intended to be called directly.
    
           However, for debugging purposes, it can be given some options on
           the command line:
    
           **-d** Turn on debugging mode.  In this mode, no attempts are made
                  to access any keys and, if a handler program is selected,
                  it won't be executed; instead, this program will print a
                  message and exit 0.
    
           **-D** In debugging mode, use the proposed key description
                  specified with this rather than the sample
                  ("user;0;0;1f0000;debug:1234") built into the program.
    
           **-l** Use configuration from the current directory.  The program
                  will use _request-key.d/*_ and _request-key.conf_ from the
                  current directory rather than from _/etc_.
    
           **-n** Don't log to the system log.  Ordinarily, error messages
                  and debugging messages will be copied to the system log -
                  this will prevent that.
    
           **-v** Turn on debugging output.  This may be specified multiple
                  times to produce increasing levels of verbosity.
    
           **--version**
                  Print the program version and exit.
    


## ERRORS



           All errors will be logged to the syslog.
    


## FILES



           _/etc/request-key.d/*.conf_ Individual configuration files.
    
           _/etc/request-key.conf_ Fallback configuration file.
    


* * *
# sepolicy-transition

## NAME



           sepolicy-transition - Examine the SELinux Policy and generate a
           process transition report
    


## SYNOPSIS



           **sepolicy transition [-h] -s SOURCE**
    
           **sepolicy transition [-h] -s SOURCE -t TARGET**
    


## DESCRIPTION



           **sepolicy transition** will show all domains that a given SELinux
           source domain can transition to, including the entrypoint.
    
           If a target domain is given, sepolicy transition will examine
           policy for all transition paths from the source domain to the
           target domain, and will list the paths.
    


## OPTIONS



           _-h, --help_
                  Display help message
    
           _-s, --source_
                  Specify the source SELinux domain type
    
           _-t, --target_
                  Specify the target SELinux domain type
    


## EXAMPLE



           List all domain transition paths from init_t to httpd_t
           # sepolicy transition -s init_t -t httpd_t
           List all transitions available from samba domain, including entry points and booleans controlling each transition
           # sepolicy transition -s smbd_t
    


* * *
# ibcheckportstate

## NAME



           ibcheckportstate - validate IB port for LinkUp and not Active
           state
    


## SYNOPSIS



           **ibcheckportstate**[-h] [-v] [-N | -nocolor] [-G] [-C ca_name] [-P
           ca_port] [-t(imeout) timeout_ms] <lid|guid> <port>
    


## DESCRIPTION



           Check connectivity and check the specified port for proper port
           state (Active) and port physical state (LinkUp).  Port address is
           a lid unless -G option is used to specify a GUID address.
    


## OPTIONS



           -G      use GUID address argument. In most cases, it is the Port
           GUID.
                   Example:
                   "0x08f1040023"
    
           -v      increase the verbosity level
    
           -N | -nocolor use mono rather than color mode
    
           -C <ca_name>    use the specified ca_name.
    
           -P <ca_port>    use the specified ca_port.
    
           -t <timeout_ms> override the default timeout for the solicited
           mads.
    


## EXAMPLE



           ibcheckportstate 2 3         # check lid 2 port 3
    


* * *
# devlink-lc

## NAME



           devlink-lc - devlink line card configuration
    


## SYNOPSIS



           **devlink**[ _OPTIONS_ ] **lc**{ _COMMAND_ | **help**}
    
           _OPTIONS_ := { **-V**[_ersion_] }
    
           **devlink lc set** _DEV_ **lc** _LC_INDEX_ [ **type**{ _LC_TYPE_ | **notype**} ]
    
           **devlink lc show**[ _DEV_ [ **lc** _LC_INDEX_ ] ]
    
           **devlink lc help**
    


## DESCRIPTION



       **devlink lc set - change line card attributes**
           _DEV_    Specifies the devlink device to operate on.
    
                      Format is:
                        BUS_NAME/BUS_ADDRESS
    
           **lc** _LC_INDEX_
                  Specifies index of a line card slot to set.
    
           **type**{ _LC_TYPE_ | **notype**} Type of line card to provision. Each
                  driver provides a list of supported line card types which
                  is shown in the output of **devlink lc show** command.
    
       **devlink lc show - display line card attributes**
           _DEV_    Specifies the devlink device to operate on. If this and **lc**
                  arguments are omitted all line cards of all devices are
                  listed.
    
           **lc** _LC_INDEX_
                  Specifies index of a line card slot to show.
    


## EXAMPLES



           devlink lc show
               Shows the state of all line cards on the system.
    
           devlink lc show pci/0000:01:00.0 lc 1
               Shows the state of line card with index 1.
    
           devlink lc set pci/0000:01:00.0 lc 1 type 16x100G
               Sets type of specified line card to type _16x100G_.
    
           devlink lc set pci/0000:01:00.0 lc 1 notype
               Clears provisioning on a line card.
    


* * *
# e2mmpstatus

## NAME



           e2mmpstatus - Check MMP status of an ext4 file system
    


## SYNOPSIS



           **e2mmpstatus**[**-i**] <_file_ system _>_
    


## OPTIONS



           **-i** prints out the MMP information rather than check it.
    


## DESCRIPTION



           **e2mmpstatus** is used to check Multiple-Mount Protection (MMP)
           status of an ext4 file system with the **mmp** feature enabled.  The
           specified _file system_ can be a device name (e.g.  _/dev/hdc1_ ,
           _/dev/sdb2_), or an ext4 file system label or UUID, for example
           **UUID=8868abf6-88c5-4a83-98b8-bfc24057f7bd** or **LABEL=root**.  By
           default, the **e2mmpstatus** program checks whether it is safe to
           mount the file system without taking the risk of mounting it more
           than once.
    
           MMP (multiple-mount protection) is a feature that adds protection
           against the file system being modified simultaneously by more than
           one node.  It is NOT safe to mount a file system when one of the
           following conditions is true:
                1. e2fsck is running on the file system.
                2. the file system is in use by another node.
                3. The MMP block is corrupted or cannot be read for some
           reason.
           The **e2mmpstatus** program might wait for some time to see whether
           the MMP block is being updated by any node during this period.
           The time taken depends on how frequently the MMP block is being
           written by the other node.
    


## EXIT CODE



           The exit code returned by **e2mmpstatus** is 0 when it is safe to
           mount the file system, 1 when the MMP block shows the file system
           is in use on another node and it is NOT safe to mount the file
           system, and 2 if some other failure occurred that prevents the
           check from properly detecting the current MMP status.
    


* * *
# ibcheckstate

## NAME



           ibcheckstate - find ports in IB subnet which are link up but not
           active
    


## SYNOPSIS



           **ibcheckstate**[-h] [-v] [-N | -nocolor] [<topology-file> | -C
           ca_name -P ca_port -t(imeout) timeout_ms]
    


## DESCRIPTION



           ibcheckstat is a script which uses a full topology file that was
           created by ibnetdiscover, scans the network to validate the port
           state and port physical state, and reports any ports which have a
           port state other than Active or a port physical state other than
           LinkUp.
    


## OPTIONS



           -N | -nocolor use mono rather than color mode
    
           -C <ca_name>    use the specified ca_name.
    
           -P <ca_port>    use the specified ca_port.
    
           -t <timeout_ms> override the default timeout for the solicited
           mads.
    


* * *
# vdpa

## NAME



           vdpa - vdpa management tool
    


## SYNOPSIS



           **vdpa**[ _OPTIONS_ ] { _dev_ |_mgmtdev_ } { _COMMAND_ | **help**}
    


## OPTIONS



           **-V** , **--Version**
                  Print the version of the **vdpa** utility and exit.
    
           **-j** , **--json**
                  Generate JSON output.
    
           **-p** , **--pretty**
                  When combined with -j generate a pretty JSON output.
    
       _OBJECT_
           **dev** - vdpa device.
    
           **mgmtdev**
                  - vdpa management device.
    
       _COMMAND_
           Specifies the action to perform on the object.  The set of
           possible actions depends on the object type.  It is possible to
           **show**(or **list**) objects. The **help** command is available for all
           objects. It prints out a list of available commands and argument
           syntax conventions.
    
           If no command is given, some default command is assumed.  Usually
           it is **show** or, if the objects of this class cannot be listed,
           **help**.
    


## EXIT STATUS



           Exit status is 0 if command was successful or a positive integer
           upon failure.
    


* * *
# ibstat

## NAME



           ibstat - query basic status of InfiniBand device(s)
    


## SYNOPSIS



           ibstat [options] <ca_name> [portnum]
    


## DESCRIPTION



           ibstat is a binary which displays basic information obtained from
           the local IB driver. Output includes LID, SMLID, port state, link
           width active, and port physical state.
    
           It is similar to the ibstatus utility but implemented as a binary
           rather than a script. It has options to list CAs and/or ports and
           displays more information than ibstatus.
    


## OPTIONS



           **-l, --list_of_cas**
                  list all IB devices
    
           **-s, --short**
                  short output
    
           **-p, --port_list**
                  show port list
    
           **ca_name**
                  InfiniBand device name
    
           **portnum**
                  port number of InfiniBand device
    
       **Debugging flags**
           **-d** raise the IB debugging level.  May be used several times
                  (-ddd or -d -d -d).
    
           **-h, --help** show the usage message
    
           **-v, --verbose**
                  increase the application verbosity level.  May be used
                  several times (-vv or -v -v -v)
    
           **-V, --version** show the version info.
    
       **Configuration flags**
           **--config, -z <config_file> **Specify alternate config file.
              Default:
              /ssd11/FOSS/rdma-core/build/etc/infiniband-diags/ibdiag.conf
    


## EXAMPLES



              ibstat            # display status of all ports on all IB devices
              ibstat -l         # list all IB devices
              ibstat -p         # show port guids
              ibstat mthca0 2   # show status of port 2 of 'mthca0'
    


* * *
# vdpa-mgmtdev

## NAME



           vdpa-dev - vdpa management device view
    


## SYNOPSIS



           **vdpa mgmtdev**{ _COMMAND_ | **help**}
    
           _OPTIONS_ := { **-V**[_ersion_] }
    
           **vdpa mgmtdev show**[ _MGMTDEV_ ]
    
           **vdpa mgmtdev help**
    


## DESCRIPTION



       **vdpa mgmtdev show - display vdpa management device attributes**
           _MGMTDEV_ - specifies the vdpa management device to show.  If this
           argument is omitted all management devices are listed.
    


## EXAMPLES



           vdpa mgmtdev show
               Shows all the vdpa management devices on the system.
    
           vdpa mgmtdev show bar
               Shows the specified vdpa management device.
    


* * *
# semanage-port

## NAME



           **semanage-port - SELinux Policy Management port mapping tool**
    


## SYNOPSIS



           **semanage port [-h] [-n] [-N] [-S STORE] [ --add -t TYPE -p**
           **PROTOCOL -r RANGE port_name | port_range | --delete -p PROTOCOL**
           **port_name | port_range | --deleteall | --extract | --list [-C] |**
           **--modify -t TYPE -p PROTOCOL -r RANGE port_name | port_range ]**
    


## DESCRIPTION



           semanage is used to configure certain elements of SELinux policy
           without requiring modification to or recompilation from policy
           sources.  **semanage port** controls the port number to port type
           definitions.
    


## OPTIONS



           _-h, --help_
                  Show this help message and exit
    
           _-n, --noheading_
                  Do not print heading when listing the specified object type
    
           _-N, --noreload_
                  Do not reload policy after commit
    
           _-S STORE, --store STORE_
                  Select an alternate SELinux Policy Store to manage
    
           _-C, --locallist_
                  List local customizations
    
           _-a, --add_
                  Add a record of the specified object type
    
           _-d, --delete_
                  Delete a record of the specified object type
    
           _-m, --modify_
                  Modify a record of the specified object type
    
           _-l, --list_
                  List records of the specified object type
    
           _-E, --extract_
                  Extract customizable commands, for use within a transaction
    
           _-D, --deleteall_
                  Remove all local customizations
    
           _-t TYPE, --type TYPE_
                  SELinux type for the object
    
           _-r RANGE, --range RANGE_
                  MLS/MCS Security Range (MLS/MCS Systems only) SELinux Range
                  for SELinux login mapping defaults to the SELinux user
                  record range. SELinux Range for SELinux user defaults to
                  s0.
    
           _-p PROTO, --proto PROTO_
                  Protocol for the specified port (tcp|udp|dccp|sctp) or
                  internet protocol version for the specified node
                  (ipv4|ipv6).
    


## EXAMPLE



           List all port definitions
           # semanage port -l
           Allow Apache to listen on tcp port 81 (i.e. assign tcp port 81 label http_port_t, which apache is allowed to listen on)
           # semanage port -a -t http_port_t -p tcp 81
           Allow sshd to listen on tcp port 8991 (i.e. assign tcp port 8991 label ssh_port_t, which sshd is allowed to listen on)
           # semanage port -a -t ssh_port_t -p tcp 8991
    


* * *
# plipconfig

## NAME



           plipconfig - fine tune PLIP device parameters
    


## SYNOPSIS



           **plipconfig interface**[**nibble** _NN_] [**trigger** _NN_]
           **plipconfig**[**-V**] [**--version**] [**-h**] [**--help**]
    


## DESCRIPTION



           **Plipconfig** is used to (hopefully) improve PLIP performance by
           changing the default timing parameters used by the PLIP protocol.
           Results are dependent on the parallel port hardware, cable, and
           the CPU speed of each machine on each end of the PLIP link.
    
           If the single **interface** argument is given, **plipconfig** displays the
           status of the given interface only.  Otherwise, it will try to set
           the options.
    


## OPTIONS



           **nibble NN**
                  Sets the nibble wait value in microseconds. Default is
                  3000.
    
           **trigger NN**
                  Sets the trigger wait value in microseconds. Default is
                  500.
    
           PLIP speed can in some cases be improved by lowering the default
           values.  Values which are too low may cause excess use of CPU,
           poor interrupt response time resulting in serial ports dropping
           characters, or in dropping of PLIP packets. Changing the plip MTU
           can also affect PLIP speed.
    


## NOTE



           If you get no response it is far more likely the irq is wrong and
           needs setting with ifconfig. The few cases where the default
           parameters will be too fast are those using very long cables.
           Something you should never do as the parallel port is not
           specified or designed for driving long cable runs.
    


## BUGS



           Non.
    


* * *
# cupsaccept

## NAME



           cupsaccept/cupsreject - accept/reject jobs sent to a destination
    


## SYNOPSIS



           **cupsaccept**[ **-E**] [ **-U** _username_ ] [ **-h** _hostname[:port]_ ]
           _destination(s)_
           **cupsreject**[ **-E**] [ **-U** _username_ ] [ **-h** _hostname[:port]_ ] [ **-r**
           _reason_ ] _destination(s)_
    


## DESCRIPTION



           The **cupsaccept** command instructs the printing system to accept
           print jobs to the specified destinations.
    
           The **cupsreject** command instructs the printing system to reject
           print jobs to the specified destinations.  The _-r_ option sets the
           reason for rejecting print jobs. If not specified, the reason
           defaults to "Reason Unknown".
    


## OPTIONS



           The following options are supported by both **cupsaccept** and
           **cupsreject** :
    
           **-E** Forces encryption when connecting to the server.
    
           **-U** _username_
                Sets the username that is sent when connecting to the server.
    
           **-h** _hostname[:port]_
                Chooses an alternate server.
    
           **-r** "_reason_ "
                Sets the reason string that is shown for a printer that is
                rejecting jobs.
    


## CONFORMING TO



           The **cupsaccept** and **cupsreject** commands correspond to the System V
           printing system commands "accept" and "reject", respectively.
           Unlike the System V printing system, CUPS allows printer names to
           contain any printable character except SPACE, TAB, "/", or "#".
           Also, printer and class names are _not_ case-sensitive.
    
           Finally, the CUPS versions may ask the user for an access password
           depending on the printing system configuration.
    


* * *
# rpm-plugin-dbus-announce

## NAME



           rpm-plugin-dbus-announce - DBus plugin for the RPM Package Manager
    


## Description



           The plugin writes basic information about rpm transactions to the
           system dbus - like packages installed or removed.  Other programs
           can subscribe to the signals to be notified of the packages on the
           system change.
    


## DBus Signals



           Sends **StartTransaction** and **EndTransaction** messages from the
           **/org/rpm/Transaction** object with the **org.rpm.Transaction**
           interface.
    
           The signal passes the DB cookie as a string and the transaction id
           as an unsigned 32 bit integer.
    


## Configuration



           There are currently no options for this plugin in particular.  See
           rpm-plugins(8) on how to control plugins in general.
    


* * *
# togglesebool

## NAME



           togglesebool - flip the current value of a SELinux boolean
    


## SYNOPSIS



           **togglesebool** _boolean..._
    


## DESCRIPTION



           **togglesebool** flips the current value of a list of booleans. If the
           value is currently a 1, then it will be changed to a 0 and vice
           versa. Only the "in memory" values are changed; the boot-time
           settings are unaffected.
    


* * *
# restorecon_xattr

## NAME



           restorecon_xattr - manage _security.sehash_ extended attribute
           entries added by setfiles(8) or restorecon(8).
    


## SYNOPSIS



           **restorecon_xattr**[**-d**] [**-D**] [**-m**] [**-n**] [**-r**] [**-v**] [**-e** _directory_] [**-f**
           _specfile_] _pathname_
    


## DESCRIPTION



           **restorecon_xattr** will display the SHA1 digests added to extended
           attributes _security.sehash_ or delete the attribute completely.
           These attributes are set by restorecon(8) or setfiles(8) to
           specified directories when relabeling recursively.
    
           **restorecon_xattr** is useful for managing the extended attribute
           entries particularly when users forget what directories they ran
           restorecon(8) or setfiles(8) from.
    
           **RAMFS** and **TMPFS** filesystems do not support the _security.sehash_
           extended attribute and are automatically excluded from searches.
    
           By default **restorecon_xattr** will display the SHA1 digests with
           "Match" appended if they match the default specfile set or the
           _specfile_ set used with the **-f** option. Non-matching SHA1 digests
           will be displayed with "No Match" appended.  This feature can be
           disabled by the **-n** option.
    


## OPTIONS



           **-d** delete all non-matching _security.sehash_ directory digest
                  entries.
    
           **-D** delete all _security.sehash_ directory digest entries.
    
           **-m** do not read **/proc/mounts** to obtain a list of non-seclabel
                  mounts to be excluded from relabeling checks.
                  Setting **-m** is useful where there is a non-seclabel fs
                  mounted with a seclabel fs mounted on a directory below
                  this.
    
           **-n** Do not append "Match" or "No Match" to displayed digests.
    
           **-r** recursively descend directories.
    
           **-v** display SHA1 digest generated by specfile set (Note that
                  this digest is not used to match the _security.sehash_
                  directory digest entries, and is shown for reference only).
    
           **-e** _directory_
                  directory to exclude (repeat option for more than one
                  directory).
    
           **-f** _specfile_
                  an optional _specfile_ containing file context entries as
                  described in file_contexts(5).  If the option is not
                  specified, then the default file_contexts will be used.
    


## ARGUMENTS



           _pathname_
                  the pathname of the directory tree to be searched.
    


## EXAMPLE



           List all paths that where assigned a checksum by "restorecon/setfiles -D"
           # restorecon_xattr -r /
           Remove all non-matching checksums
           # restorecon_xattr -rd /
    


* * *
# yum-cron

## NAME



           yum-cron - an interface to conveniently call yum from cron
    


## SYNOPSIS



           **yum-cron**[config-file]
    


## DESCRIPTION



           **yum-cron** is an alternate interface to yum that is optimised to be
           convenient to call from cron.  It provides methods to keep
           repository metadata up to date, and to check for, download, and
           apply updates.  Rather than accepting many different command line
           arguments, the different functions of yum-cron can be accessed
           through config files.
    
           _config-file_ is used to optionally specify the path to the
           configuration file to use.  If it is not given, the default
           configuration file will be used.  It is useful to be able to
           specify different configuration files for different use cases.
           For example, one configuration file might be set to update the
           repository metadata, and a line could be added to the crontab to
           run yum-cron frequently using this file.  Then, another
           configuration file might be set to install updates, and yum-cron
           could be run from cron using this file just once each day.
    


## FILES



           /etc/yum/yum-cron.conf
           /etc/yum/yum-cron-hourly.conf
           /etc/yum/yum-cron-security.conf
    


## BUGS



           There of course aren't any bugs, but if you find any, you should
           email
            the mailing list, yum@lists.baseurl.org, or consult bugzilla.
    


* * *
# slattach

## NAME



           slattach - attach a network interface to a serial line
    


## SYNOPSIS



           **slattach [-dehlLmnqv] [-c command] [-p proto] [-s speed] [tty]**
    


## DESCRIPTION



           **Slattach** is a tiny little program that can be used to put a normal
           terminal ("serial") line into one of several "network" modes, thus
           allowing you to use it for point-to-point links to other
           computers.
    


## OPTIONS



           **tty** Path to a serial device like _/dev/ttyS*_ , _/dev/cua*_ or
                  _/dev/ptmx_ to spawn a new pseudo tty.
    
           **[-c command]**
                  Execute **command** when the line is hung up. This can be used
                  to run scripts or re-establish connections when a link goes
                  down.
    
           **[-d]** Enable debugging output.  Useful when determining why a
                  given setup doesn't work.
    
           **[-h]** Exit when the carrier is lost. This works on both /dev/tty
                  and /dev/cua devices by directly monitoring the carrier
                  status every 15 seconds.
    
           **[-v]** Enable verbose output.  Useful in shell scripts.
    
           **[-q]** Operate in quiet mode - no messages at all.
    
           **[-l]** Create an UUCP-style lockfile for the device in /var/lock.
    
           **[-n]** Equivalent to the "mesg n" command.
    
           **[-m]** Do **not** initialize the line into 8 bits raw mode.
    
           **[-e]** Exit right after initializing device, instead of waiting
                  for the line to hang up.
    
           **[-L]** Enable 3 wire operation. The terminal is moved into CLOCAL
                  mode, carrier watching is disabled.
    
           **[-p proto]**
                  Set a specific kind of protocol to use on the line.  The
                  default is set to **cslip** , i.e. compressed SLIP.  Other
                  possible values are **slip**(normal SLIP), **adaptive**(adaptive
                  CSLIP/SLIP), **ppp**(Point-to-Point Protocol) and **kiss**(a
                  protocol used for communicating with AX.25 packet radio
                  terminal node controllers).  The special argument **tty** can
                  be used to put the device back into normal serial
                  operation.  Using 'ppp' mode is not normally useful as ppp
                  requires an additional ppp daemon **pppd** to be active on the
                  line. For kiss connections the **kissattach** program should be
                  used.
    
           **[-s speed]**
                  Set a specific line speed, other than the default.
    
           If no arguments are given, the current terminal line (usually: the
           login device) is used.  Otherwise, an attempt is made to claim the
           indicated terminal port, lock it, and open it.
    


## FILES



           _/dev/cua* /var/lock/LCK.* /dev/ttyS* /dev/ptmx_
    


## BUGS



           None known.
    


* * *
# sepolicy-interface

## NAME



           sepolicy-interface - Print interface information based on the
           installed SELinux Policy
    


## SYNOPSIS



           **sepolicy interface [-h] [-c] [-v] [-f FILE] [-a | -u | -l | -i**
           **INTERFACE [INTERFACE ... ]]**
    


## DESCRIPTION



           Use sepolicy interface to print information of interface macros
           between domains in SELinux policy modules, as used in Reference
           Policy. The information is based on installed on-disk
           representation of the SELinux Policy and it may be different from
           the policy which is currently loaded.
    


## OPTIONS



           _-a, --list_admin_
                  List all domains with admin interface
    
           _-c, --compile_
                  Test compile of interfaces
    
           _-h, --help_
                  Display help message
    
           _-i, --interface_
                  Interface(s) to be displayed
    
           _-l, --list_
                  List all interfaces
    
           _-u, --list_user_
                  List all domains with SELinux user role interface
    
           _-v, --verbose_
                  Display extended information about the interface including
                  parameters and description if available.
    
           _-f, --file_
                  Interface file to be explored
    


## EXAMPLE



           Show description of given interface
           # sepolicy interface -vi samba_rw_config
           List interfaces in given interface file and show their description
           # sepolicy interface -f my_policy.if -lv
           Run compile test for all interfaces in given file
           # sepolicy interface -f my_policy.if -lc
    


* * *
# systemd-tpm2-clear.service

## NAME



           systemd-tpm2-clear.service - Request that the TPM security chip is
           cleared on next boot
    


## SYNOPSIS



           systemd-tpm2-clear.service
    
           /usr/lib/systemd/systemd-tpm2-clear
    


## DESCRIPTION



           systemd-tpm2-clear.service is a service that requests that the TPM
           is reset by the PC firmware on the next boot. It makes use of the
           TPM Physical Presence Interface (PPI). Note that this service does
           not immediately execute the clear operation, but simply asks the
           PC firmware to execute it at next boot, where the user will be
           asked for confirmation before the operation is done.
    
           systemd-tpm2-clear.service is typically hooked into the
           factory-reset.target unit in order to request the TPM request
           before an immediate reboot. See **Factory Reset******[1] for more
           information.


## OPTIONS



           The following options are understood:
    
           **--graceful**
               Exit cleanly and execute no operation if the system does not
               possess a TPM chip.
    
               Added in version 258.
    
           **-h** , **--help**
               Print a short help text and exit.
    
           **--version**
               Print a short version string and exit.
    


## KERNEL COMMAND LINE



           systemd-tpm2-clear understands the following kernel command line
           parameters:
    
           _systemd.tpm2_allow_clear=_
               Takes a boolean argument. If false the service will succeed,
               but instead of requesting the TPM clear operation from the PC
               firmware it will not execute any operation. If not specified
               defaults to true.
    
               Added in version 258.
    


## NOTES



            1. Factory Reset
               https://systemd.io/FACTORY_RESET
    


* * *