from small one page howto to huge articles all in one place
 

search text in:





Poll
Which filesystem do you use?






poll results

Last additions:
using iotop to find disk usage hogs

using iotop to find disk usage hogs

words:

887

views:

186349

userrating:

average rating: 1.7 (102 votes) (1=very good 6=terrible)


May 25th. 2007:
Words

486

Views

250360

why adblockers are bad


Workaround and fixes for the current Core Dump Handling vulnerability affected kernels

Workaround and fixes for the current Core Dump Handling vulnerability affected kernels

words:

161

views:

137535

userrating:

average rating: 1.4 (42 votes) (1=very good 6=terrible)


April, 26th. 2006:

Druckversion
You are here: manpages





GRADM

Section: Maintenance Commands (8)
Index Return to Main Contents
 

NAME

gradm - Administration program for the grsecurity RBAC system  

SYNOPSIS

gradm [ -E ] [ -R ] [ -C ] [ -F ] [ -L <logfile> ] [ -O <filename|stream> ] [ -M <filename|uid> ] [ -D ] [ -P [rolename] ] [ -a <rolename> ] [ -n <rolename> ] [ -p <rolename> ] [ -u ] [ -V ] [ -h ] [ -v ]

 

DESCRIPTION

gradm is the userspace RBAC parsing and authentication program for grsecurity

grsecurity aims to be a complete security system for Linux 2.4. gradm performs several tasks for the RBAC system including authenticated via a password to the kernel and parsing rules to be passed to the kernel.

 

OPTIONS

All options to gradm are mutually exclusive, except for -L and -O.
-E
Enable the RBAC system
-R Reload the RBAC system (only valid while in admin mode)
-C Perform a check of the RBAC policy, running the same analysis against it that is performed when enabling.
-F Toggle full learning mode. If used only with -L, it enables the RBAC system in full learning mode. If used with -L and -O, it parses the full learning logs and generates a complete ruleset.
-M <filename|uid> Remove an execution ban on a given uid or filename that has been put in place by the RES_CRASH resource restriction of the RBAC system.
-L <logfile> Parses the learning logs. Accepts an argument which specifies the logfile to scan for the learning logs. If "-" is specified as the logfile, stdin will be used as the learning log. This option can be used with -E, -O, or -F.
-O <filename|stream> Specifies output mode. Requires a single argument that can be "stdout", "stderr", or a regular file. Only used with -L or -F.
-D Disable the RBAC system
-P [rolename] Without an argument, it sets the password for administering the RBAC system. With a role name as an argument, it sets the password for that given special role.
-a <rolename> Authenticate to a special role that requires a password.
-n <rolename> Authenticate to a special role that does not require a password.
-p <rolename> Authenticate through PAM to a special role.
-u Removes yourself from your current special role, reverting back to the normal role selection. To be used, for instance, for logging out of an admin role without exiting your shell.
-V Displays verbose policy statistics when enabling the RBAC system or checking the RBAC policy. Can only be used with -C, -E, or -F -L <filename>
-h Display help information
-v Print version information and exit
 

REPORTING BUGS

Please include as much information as possible(using any available debugging options) and send bug reports for gradm or the grsecurity RBAC system to spender@grsecurity.net.

 

AUTHOR

grsecurity and gradm were created and are maintained by Brad Spengler <spender@grsecurity.net>


 

Index

NAME
SYNOPSIS
DESCRIPTION
OPTIONS
REPORTING BUGS
AUTHOR





Support us on Content Nation
rdf newsfeed | rss newsfeed | Atom newsfeed
- Powered by LeopardCMS - Running on Gentoo -
Copyright 2004-2020 Sascha Nitsch Unternehmensberatung GmbH
Valid XHTML1.1 : Valid CSS : buttonmaker
- Level Triple-A Conformance to Web Content Accessibility Guidelines 1.0 -
- Copyright and legal notices -
Time to create this page: 19.4 ms