documentation:rsbac_handbook:appendixes:rsbac_reference:proc_interface
Releases
Current version
Git/Latestdiff: 1.5.6
Latest Snapshots
Produced after each commit or rebase to new upstream version
GIT
RSBAC source code, can be unstable sometimes
Events
No events planned
Differences
This shows you the differences between two versions of the page.
| Next revision | Previous revision Last revision Both sides next revision | ||
|
documentation:rsbac_handbook:appendixes:rsbac_reference:proc_interface [2006/05/17 17:55] torc created |
documentation:rsbac_handbook:appendixes:rsbac_reference:proc_interface [2010/10/05 12:48] 127.0.0.1 (old revision restored) |
||
|---|---|---|---|
| Line 28: | Line 28: | ||
| * log_levels: shows adf log levels for all requests. Log levels can be changed by calling ''echo "log_levels request n" > /proc/rsbac-info/log_levels'' with request = request name, e.g. WRITE, n = level. | * log_levels: shows adf log levels for all requests. Log levels can be changed by calling ''echo "log_levels request n" > /proc/rsbac-info/log_levels'' with request = request name, e.g. WRITE, n = level. | ||
| * rmsg (if own logging is enabled): similar to kmsg in main proc dir, logging of RSBAC requests. This file can be used by programs like klogd, or simply make a ''cat rmsg''. | * rmsg (if own logging is enabled): similar to kmsg in main proc dir, logging of RSBAC requests. This file can be used by programs like klogd, or simply make a ''cat rmsg''. | ||
| + | * Max. number of kernel log messages from RSBAC per second: ''echo "debug syslog_rate n" > /proc/rsbac_info/debug'' | ||
| + | * The RSBAC log buffer size is changed by ''echo "debug rmsg_maxentries n" > debug'' | ||
| + | * The RSBAC remote log buffer size is changed by ''echo "debug log_remote_maxentries n" > debug'' | ||
| + | * Remote logging address and port can be changed with ''echo "debug log_remote_addr a.b.c.d" >debug'' ''echo "debug log_remote_port n" > /proc/rsbac-info/debug''. | ||
| ==== Model Specific ==== | ==== Model Specific ==== | ||
| Line 34: | Line 38: | ||
| * reg_modules (if REG is enabled): shows currently registered additional decision modules and syscalls. | * reg_modules (if REG is enabled): shows currently registered additional decision modules and syscalls. | ||
| * acl_acllist (if ACL is enabled): Detailed listing of all ACL entries and masks in the system. | * acl_acllist (if ACL is enabled): Detailed listing of all ACL entries and masks in the system. | ||
| + | |||
| ==== Debug and Softmode Switching ==== | ==== Debug and Softmode Switching ==== | ||
| * debug: shows all RSBAC debug settings, softmode, dac_disable and nosyslog. | * debug: shows all RSBAC debug settings, softmode, dac_disable and nosyslog. | ||
| - | * Levels can be changed by calling ''echo "debug name n" > /proc/rsbac-info/debug''. Valid names are ds, aef, no_write, ds_pm, aef_pm, adf_pm, adf_ms, ds_rc, aef_rc, adf_rc, ds_acl, aef_acl, adf_acl, auto, softmode, dac_disable and nosyslog, but only, if shown when reading this file. Valid levels are 0 and 1. | + | * Levels can be changed by calling ''echo "debug name n" > /proc/rsbac-info/debug''. Valid names are ds, aef, no_write, ds_pm, aef_pm, adf_pm, adf_ms, ds_rc, aef_rc, adf_rc, ds_acl, aef_acl, adf_acl, adf_auth, auto, softmode, dac_disable and nosyslog, but only, if shown when reading this file. Valid levels are 0 and 1. |
| * Debug levels can be preset to 1 by kernel parameters with same name as variable name shown, e.g. rsbac_debug_ds or rsbac_softmode. | * Debug levels can be preset to 1 by kernel parameters with same name as variable name shown, e.g. rsbac_debug_ds or rsbac_softmode. | ||
| * Individual model softmode can be switched by calling ''echo "debug ind_softmode <modname> n" >debug'' | * Individual model softmode can be switched by calling ''echo "debug ind_softmode <modname> n" >debug'' | ||
| - | * Remote logging address and port can be changed with ''echo "debug log_remote_addr a.b.c.d" >debug'' ''echo "debug log_remote_port n" > /proc/rsbac-info/debug''. | ||
| * DAZ cache ttl is set via ''echo "debug daz_ttl n" > /proc/rsbac-info/debug'' | * DAZ cache ttl is set via ''echo "debug daz_ttl n" > /proc/rsbac-info/debug'' | ||
| * CAP log missing is set with ''echo "debug cap_log_missing n" >debug'' | * CAP log missing is set with ''echo "debug cap_log_missing n" >debug'' | ||
| Line 48: | Line 52: | ||
| * backup subdir: It contains backups of what would be current aci data files. You can use cp for backups of system independent aci data structures, e.g. rc_roles, rc_types, and the admin backup tools for system dependent ones, e.g. file/dir attributes or AUTH file capabilities. Using the backup_all script or single lines from it is however strongly recommended. | * backup subdir: It contains backups of what would be current aci data files. You can use cp for backups of system independent aci data structures, e.g. rc_roles, rc_types, and the admin backup tools for system dependent ones, e.g. file/dir attributes or AUTH file capabilities. Using the backup_all script or single lines from it is however strongly recommended. | ||
| + | |||
| + | \\ | ||
| + | ---- | ||
| + | **Table of Contents:** [[documentation:rsbac_handbook|RSBAC Handbook]]\\ | ||
documentation/rsbac_handbook/appendixes/rsbac_reference/proc_interface.txt · Last modified: 2010/10/05 12:48 by 127.0.0.1