---
name: "gradm2_24"
section: "8"
platform: "linux"
package: "gradm2"
version: "2.1.5-2"
release: "Debian 3.1 (Sarge)"
platforms: ["linux"]
url: "https://new.carta.tech/gradm2_24"
---

# gradm2\_24(8)

Administration program for the grsecurity RBAC system under 2.4 kernels

## NAME

gradm2\_24 - Administration program for the grsecurity RBAC system under 2.4 kernels

## SYNOPSIS

**gradm2\_24** \[ **-E** \] \[ **-R** \] \[ **-F** \] \[ **-L \<logfile\>** \] \[ **-O \<filename\|stream\>** \] \[ **-M** \<filename\|uid\> \] \[ **-D** \] \[ **-P \[rolename\]** \] \[ **-a \<rolename\>** \] \[ **-n \<rolename\>** \] \[ **-u** \] \[ **-h** \] \[ **-v** \]

## DESCRIPTION

*gradm2* is the userspace ACL parsing and authentication program for the *grsecurity* Access Control List System.

grsecurity aims to be a complete security system for Linux 2.4. gradm2  performs several tasks for the RBAC system including authenticated via a  password to the kernel and parsing rules to be passed to the kernel.

## OPTIONS

- All options to gradm2 are mutually exclusive, except for -L and -O.

  - **-E**

  Enable the RBAC system

- **-R**

  Reload the RBAC system (only valid while in admin mode)

- **-F**

  Toggle full learning mode. If used only with -L, it enables the RBAC system in full learning mode. If used with -L and -O, it parses the full learning logs and generates a complete ruleset.

- **-M \<filename\|uid\>**

  Remove an execution ban on a given uid or filename that has been put in place by the RES\_CRASH resource restriction of the RBAC system.

- **-L \<logfile\>**

  Parses the learning logs.  Accepts an argument which specifies the logfile to scan for the learning logs. This option can be used with -E, -O, or -F.

- **-O \<filename\|stream\>**

  Specifies output mode.  Requires a single argument that can be "stdout", "stderr", or a regular file.  Only used with -L or -F.

- **-D**

  Disable the RBAC system

- **-P \[rolename\]**

  Without an argument, it sets the password for administering the RBAC system.  With a role name as an argument, it sets the password for that given special role.

- **-a \<rolename\>**

  Authenticate to a special role that requires a password.

- **-n \<rolename\>**

  Authenticate to a special role that does not require a password.

- **-u**

  Removes yourself from your current special role, reverting back to the normal role selection.  To be used, for instance, for logging out of an admin role without exiting your shell.

  **-h** Display help information

- **-v**

  Print version information and exit

- Please include as much information as possible(using any available debugging

  ## REPORTING BUGS

options) and send bug reports for gradm2 or the grsecurity RBAC system  to  **dev@grsecurity.net.**

## AUTHOR

**grsecurity and gradm2** were created and are maintained by Brad Spengler \<spender@grsecurity.net\>