NAME
gradm2_26 - Administration program for the grsecurity RBAC system under 2.6 kernels
SYNOPSIS
gradm2_26 [ -E ] [ -R ] [ -F ] [ -L <logfile> ] [ -O <filename|stream> ] [ -M <filename|uid> ] [ -D ] [ -P [rolename] ] [ -a <rolename> ] [ -n <rolename> ] [ -u ] [ -h ] [ -v ]
DESCRIPTION
gradm2 is the userspace ACL parsing and authentication program for the grsecurity Access Control List System.
grsecurity aims to be a complete security system for Linux 2.6. gradm2 performs several tasks for the RBAC system including authenticated via a password to the kernel and parsing rules to be passed to the kernel.
OPTIONS
- All options to gradm2 are mutually exclusive, except for -L and -O.
- -E
-
Enable the RBAC system
- -R
-
Reload the RBAC system (only valid while in admin mode)
- -F
-
Toggle full learning mode. If used only with -L, it enables the RBAC system in full learning mode. If used with -L and -O, it parses the full learning logs and generates a complete ruleset.
- -M <filename|uid>
-
Remove an execution ban on a given uid or filename that has been put in place by the RES_CRASH resource restriction of the RBAC system.
- -L <logfile>
-
Parses the learning logs. Accepts an argument which specifies the logfile to scan for the learning logs. This option can be used with -E, -O, or -F.
- -O <filename|stream>
-
Specifies output mode. Requires a single argument that can be "stdout", "stderr", or a regular file. Only used with -L or -F.
- -D
-
Disable the RBAC system
- -P [rolename]
-
Without an argument, it sets the password for administering the RBAC system. With a role name as an argument, it sets the password for that given special role.
- -a <rolename>
-
Authenticate to a special role that requires a password.
- -n <rolename>
-
Authenticate to a special role that does not require a password.
- -u
-
Removes yourself from your current special role, reverting back to the normal role selection. To be used, for instance, for logging out of an admin role without exiting your shell.
-h Display help information
- -v
-
Print version information and exit
- Please include as much information as possible(using any available debugging
REPORTING BUGS
options) and send bug reports for gradm2 or the grsecurity RBAC system to [email protected].
AUTHOR
grsecurity and gradm2 were created and are maintained by Brad Spengler <[email protected]>