gradm2_248
Administration program for the grsecurity rbac system under 2.4 kernels
Usage
gradm2_24 [-E]
[-R]
[-F]
[-L
<logfile>]
[{-O
<filename | stream>}]
[{-M
<filename | uid>}]
[-D]
[-P
[rolename]]
[-a
<rolename>]
[-n
<rolename>]
[-u]
[-h]
[-v]
Overview
gradm2 is the userspace ACL parsing and authentication program for the grsecurity Access Control List System.
grsecurity aims to be a complete security system for Linux 2.4. gradm2 performs several tasks for the RBAC system including authenticated via a password to the kernel and parsing rules to be passed to the kernel.
Options
- All options to gradm2 are mutually exclusive, except for -L and -O.
-
-E -
Enable the RBAC system
-
-R -
Reload the RBAC system (only valid while in admin mode)
-
-F -
Toggle full learning mode. If used only with -L, it enables the RBAC system in full learning mode. If used with -L and -O, it parses the full learning logs and generates a complete ruleset.
-
-M <filename|uid> -
Remove an execution ban on a given uid or filename that has been put in place by the RES_CRASH resource restriction of the RBAC system.
-
-L <logfile> -
Parses the learning logs. Accepts an argument which specifies the logfile to scan for the learning logs. This option can be used with -E, -O, or -F.
-
-O <filename|stream> -
Specifies output mode. Requires a single argument that can be "stdout", "stderr", or a regular file. Only used with -L or -F.
-
-D -
Disable the RBAC system
-
-P [rolename] -
Without an argument, it sets the password for administering the RBAC system. With a role name as an argument, it sets the password for that given special role.
-
-a <rolename> -
Authenticate to a special role that requires a password.
-
-n <rolename> -
Authenticate to a special role that does not require a password.
-
-u -
Removes yourself from your current special role, reverting back to the normal role selection. To be used, for instance, for logging out of an admin role without exiting your shell.
-hDisplay help information
-
-v -
Print version information and exit
- Please include as much information as possible(using any available debugging