ꦫꦣꦺꦤ꧀ꦄꦤ꧀ꦠꦱꦺꦤ

PATH: usr / sbin

#!/bin/bash
#
# kpatch hot patch module management script
#
# Copyright (C) 2014 Seth Jennings <sjenning@redhat.com>
# Copyright (C) 2014 Josh Poimboeuf <jpoimboe@redhat.com>
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA,
# 02110-1301, USA.

# This is the kpatch user script that manages installing, loading, and
# displaying information about kernel patch modules installed on the system.

INSTALLDIR=/var/lib/kpatch
SCRIPTDIR="$(readlink -f "$(dirname "$(type -p "$0")")")"
VERSION="0.6.1"
POST_ENABLE_WAIT=15	# seconds
POST_SIGNAL_WAIT=60	# seconds

# How many times to try loading the patch if activeness safety check fails.
MAX_LOAD_ATTEMPTS=5
# How long to wait before retry, in seconds.
RETRY_INTERVAL=2

usage_cmd() {
	printf '   %-20s\n      %s\n' "$1" "$2" >&2
}

usage () {
	# ATTENTION ATTENTION ATTENTION ATTENTION ATTENTION ATTENTION
	# When changing this, please also update the man page.  Thanks!
	echo "usage: kpatch <command> [<args>]" >&2
	echo >&2
	echo "Valid commands:" >&2
	usage_cmd "install [-k|--kernel-version=<kernel version>] <module>" "install patch module to be loaded at boot"
	usage_cmd "uninstall [-k|--kernel-version=<kernel version>] <module>" "uninstall patch module"
	echo >&2
	usage_cmd "load --all" "load all installed patch modules into the running kernel"
	usage_cmd "load <module>" "load patch module into the running kernel"
	usage_cmd "unload --all (UNSUPPORTED)" "unload all patch modules from the running kernel"
	usage_cmd "unload <module> (UNSUPPORTED)" "unload patch module from the running kernel"
	echo >&2
	usage_cmd "info <module>" "show information about a patch module"
	echo >&2
	usage_cmd "list" "list installed patch modules"
	echo >&2
	usage_cmd "signal" "signal/poke any process stalling the current patch transition"
	echo >&2
	usage_cmd "version" "display the kpatch version"
	exit 1
}

warn() {
	echo "kpatch: $*" >&2
}

die() {
	warn "$@"
	exit 1
}

confirm_prompt() {
	local prompt="$1"
	local answer
	while true; do
		read -rp "$prompt [Y/N] " answer
		[[ $answer == 'Y' || $answer == 'y' ]] && return 0
		[[ $answer == 'N' || $answer == 'n' ]] && return 1
	done
}

__find_module () {
	MODULE="$1"
	[[ -f "$MODULE" ]] && return

MODULE="$INSTALLDIR/$(uname -r)/$1"
	[[ -f "$MODULE" ]] && return

return 1
}

mod_name () {
	MODNAME="$(basename "$1")"
	MODNAME="${MODNAME%.ko}"
	MODNAME="${MODNAME//-/_}"
}

find_module () {
	arg="$1"
	if [[ "$arg" =~ \.ko ]]; then
		__find_module "$arg" || return 1
		mod_name "$MODULE"
		return
	else
		for i in "$INSTALLDIR/$(uname -r)"/*; do
			mod_name "$i"
			if [[ "$MODNAME" == "$arg" ]]; then
				MODULE="$i"
				return
			fi
		done
	fi

return 1
}

find_core_module() {
	COREMOD="$SCRIPTDIR"/../kmod/core/kpatch.ko
	[[ -f "$COREMOD" ]] && return

COREMOD="/usr/local/lib/kpatch/$(uname -r)/kpatch.ko"
	[[ -f "$COREMOD" ]] && return

COREMOD="/usr/lib/kpatch/$(uname -r)/kpatch.ko"
	[[ -f "$COREMOD" ]] && return

COREMOD="/usr/local/lib/modules/$(uname -r)/extra/kpatch/kpatch.ko"
	[[ -f "$COREMOD" ]] && return

COREMOD="/usr/lib/modules/$(uname -r)/extra/kpatch/kpatch.ko"
	[[ -f "$COREMOD" ]] && return

return 1
}

core_loaded () {
	grep -q -e "T klp_enable_patch" -e "T kpatch_register" /proc/kallsyms
}

get_module_name () {
	readelf -p .gnu.linkonce.this_module "$1" | grep '\[.*\]' | awk '{print $3}'
}

init_sysfs_var() {
	# If the kernel is configured with CONFIG_LIVEPATCH, use that.
	# Otherwise, use the kpatch core module (kpatch.ko).
	if [[ -e /sys/kernel/livepatch ]] ; then
		# livepatch ABI
		SYSFS="/sys/kernel/livepatch"

elif [[ -e /sys/kernel/kpatch/patches ]] ; then
		# kpatch pre-0.4 ABI
		SYSFS="/sys/kernel/kpatch/patches"

else
		# kpatch 0.4 ABI
		SYSFS="/sys/kernel/kpatch"
	fi
}

verify_module_checksum () {
	modname="$(get_module_name "$1")"
	[[ -z "$modname" ]] && return 1

checksum="$(readelf -p .kpatch.checksum "$1" 2>&1 | grep '\[.*\]' | awk '{print $3}')"

# Fail checksum match only if both exist and diverge
	if [[ ! -z "$checksum" ]] && [[ -e "$SYSFS/${modname}/checksum" ]] ; then
		sysfs_checksum="$(cat "$SYSFS/${modname}/checksum")"
		[[ "$checksum" == "$sysfs_checksum" ]] || return 1
	fi

return 0
}

in_transition() {
	local moddir="$SYSFS/$1"
	[[ $(cat "$moddir/transition" 2>/dev/null) == "1" ]] && return 0
	return 1
}

is_stalled() {
	local module="$1"
	local pid="$2"
	local patch_enabled
	local patch_state

patch_enabled="$(cat "$SYSFS/$module/enabled" 2>/dev/null)"
	patch_state="$(cat "/proc/$pid/patch_state" 2>/dev/null)"

# No patch transition in progress
	[[ "$patch_state" == "-1" ]] && return 1

[[ -z "$patch_enabled" ]] || [[ -z "$patch_state" ]] && return 1

# Stalls can be determined if the process state does not match
	# the transition target (ie, "enabled" and "patched", "disabled"
	# and "unpatched").  The state value enumerations match, so we
	# can just compare them directly:
	[[ "$patch_enabled" != "$patch_state" ]] && return 0
	return 1
}

get_transition_patch() {
	local module
	local modname
	for module in "$SYSFS"/*; do
		modname=$(basename "$module")
		if in_transition "$modname" ; then
			echo "$modname"
			return
		fi
	done
}

show_stalled_processes() {
	local module
	local proc_task
	local tid

module=$(get_transition_patch)
	[[ -z "$module" ]] && return

echo ""
	echo "Stalled processes:"
	for proc_task in /proc/[0-9]*/task/[0-9]*; do
		tid=${proc_task#*/task/}
		is_stalled "$module" "$tid" && echo "$tid $(cat "$proc_task"/comm 2>/dev/null)"
	done
}

signal_stalled_processes() {
	local module
	local proc_task
	local tid

module=$(get_transition_patch)
	[[ -z "$module" ]] && return

if [[ -e "/sys/kernel/livepatch/$module/signal" ]] ; then
		echo 1 > "/sys/kernel/livepatch/$module/signal"
	else
		for proc_task in /proc/[0-9]*/task/[0-9]*; do
			tid=${proc_task#*/task/}
			if is_stalled "$module" "$tid" ; then
				if [[ "$tid" -eq "$$" ]] ; then
					echo "skipping pid $tid $(cat "$proc_task"/comm 2>/dev/null)"
				else
					echo "signaling pid $tid $(cat "$proc_task"/comm 2>/dev/null)"
					kill -SIGSTOP "$tid"
					sleep .1
					kill -SIGCONT "$tid"
				fi
			fi
		done
	fi
}

wait_for_patch_transition() {
	local module="$1"
	local i

in_transition "$module" || return 0

echo "waiting (up to $POST_ENABLE_WAIT seconds) for patch transition to complete..."
	for (( i=0; i<POST_ENABLE_WAIT; i++ )); do
		if ! in_transition "$module" ; then
			echo "transition complete ($i seconds)"
			return 0
		fi
		sleep 1s
	done

echo "patch transition has stalled, signaling stalled process(es):"
	signal_stalled_processes

echo "waiting (up to $POST_SIGNAL_WAIT seconds) for patch transition to complete..."
	for (( i=0; i<POST_SIGNAL_WAIT; i++ )); do
		if ! in_transition "$module" ; then
			echo "transition complete ($i seconds)"
			return 0
		fi
		sleep 1s
	done

return 1
}

load_module () {
	local module="$1"

if ! core_loaded; then
		if modprobe -q kpatch; then
			echo "loaded core module"
		else
			find_core_module || die "can't find core module"
			echo "loading core module: $COREMOD"
			insmod "$COREMOD" || die "failed to load core module"
		fi

# Now that the core module has been loaded, set $SYSFS to the
		# correct value based on the loaded core module's ABI.
		init_sysfs_var
	fi

local modname
	modname="$(get_module_name "$module")"
	local moddir="$SYSFS/$modname"
	if [[ -d "$moddir" ]] ; then
		if [[ "$(cat "${moddir}/enabled")" -eq 0 ]]; then
			if verify_module_checksum "$module"; then # same checksum
				echo "module already loaded, re-enabling"
				echo 1 > "${moddir}/enabled" || die "failed to re-enable module $modname"
				if ! wait_for_patch_transition "$modname" ; then
					echo "module $modname did not complete its transition, disabling..."
					echo 0 > "${moddir}/enabled" || die "failed to disable module $modname"
					wait_for_patch_transition "$modname"
					die "error: failed to re-enable module $modname (transition stalled), patch disabled"
				fi
				return
			else
				die "error: cannot re-enable patch module $modname, cannot verify checksum match"
			fi
		else
			echo "module named $modname already loaded and enabled"
		fi
	else
		echo "loading patch module: $module"
		local i=0
		while true; do
			out="$(LC_ALL=C insmod "$module" 2>&1)"
			[[ -z "$out" ]] && break
			echo "$out" 1>&2
			[[ ! "$out" =~ "Device or resource busy" ]] &&
				die "failed to load module $module"

# "Device or resource busy" means the activeness safety check
			# failed.  Retry in a few seconds.
			i=$((i+1))
			if [[ $i -eq $MAX_LOAD_ATTEMPTS ]]; then
				die "failed to load module $module"
				break
			else
				warn "retrying..."
				sleep $RETRY_INTERVAL
			fi
		done
	fi

if ! wait_for_patch_transition "$modname" ; then
		echo "module $modname did not complete its transition, unloading..."
		unload_module "$modname"
		die "error: failed to load module $modname (transition stalled)"
	fi

return 0
}

disable_patch () {
	local modname="$1"

local enabled="$SYSFS/$modname/enabled"
	[[ -e "$enabled" ]] || die "patch module $1 is not loaded"

if [[ "$(cat "$enabled")" -eq 1 ]]; then
		echo "disabling patch module: $modname"
		local i=0
		while true; do
			out="$(export LC_ALL=C; sh -c "echo 0 > $enabled" 2>&1)"
			[[ -z "$out" ]] && break
			echo "$out" 1>&2
			if [[ ! "$out" =~ "Device or resource busy" ]]; then
				die "failed to disable module $modname"
			fi

# "Device or resource busy" means the activeness safety check
			# failed.  Retry in a few seconds.
			i=$((i+1))
			if [[ $i -eq $MAX_LOAD_ATTEMPTS ]]; then
				die "failed to disable module $modname"
			else
				warn "retrying..."
				sleep $RETRY_INTERVAL
			fi
		done
	fi

if ! wait_for_patch_transition "$modname" ; then
		die "transition stalled for $modname"
	fi
}

unload_module () {
	PATCH="${1//-/_}"
	PATCH="${PATCH%.ko}"
	disable_patch "$PATCH"

echo "unloading patch module: $PATCH"
	# ignore any error here because rmmod can fail if the module used
	# KPATCH_FORCE_UNSAFE.
	rmmod "$PATCH" 2> /dev/null || return 0
}

get_module_version() {
	MODVER="$(modinfo -F vermagic "$1")" || return 1
	MODVER="${MODVER/ */}"
}

unset MODULE

# Initialize the $SYSFS var.  This only works if the core module has been
# loaded.  Otherwise, the value of $SYSFS doesn't matter at this point anyway,
# and we'll have to call this function again after loading it.
init_sysfs_var

[[ "$#" -lt 1 ]] && usage

# RHEL-specific support options
case "$1" in
"force")
	# For scripting purposes, support "kpatch force unload".
	# Shift out the "force" to avoid the user-prompt check below.
	shift
	;;
"unload")
	confirm_prompt "WARNING: Red Hat doesn't support unloading of kpatches, continue anyway?" || exit 1
	;;
esac

case "$1" in
"load")
	[[ "$#" -ne 2 ]] && usage
	case "$2" in
	"--all")
		for i in "$INSTALLDIR/$(uname -r)"/*.ko; do
			[[ -e "$i" ]] || continue
			load_module "$i" || die "failed to load module $i"
		done
		;;
	*)
		PATCH="$2"
		find_module "$PATCH" || die "can't find $PATCH"
		load_module "$MODULE" || die "failed to load module $PATCH"
		;;
	esac
	;;

"unload")
	[[ "$#" -ne 2 ]] && usage
	case "$2" in
	"--all")
		for module in "$SYSFS"/*; do
			[[ -e "$module" ]] || continue
			unload_module "$(basename "$module")" || die "failed to unload module $module"
		done
		;;
	*)
		unload_module "$(basename "$2")" || die "failed to unload module $2"
		;;
	esac
	;;

"install")
	KVER="$(uname -r)"
	shift
	options="$(getopt -o k: -l "kernel-version:" -- "$@")" || die "getopt failed"
	eval set -- "$options"
	while [[ $# -gt 0 ]]; do
		case "$1" in
		-k|--kernel-version)
			KVER="$2"
			shift
			;;
		--)
			[[ -z "$2" ]] && die "no module file specified"
			PATCH="$2"
			;;
		esac
		shift
	done

[[ ! -e "$PATCH" ]] && die "$PATCH doesn't exist"
	[[ "${PATCH: -3}" == ".ko" ]] || die "$PATCH isn't a .ko file"

get_module_version "$PATCH" || die "modinfo failed"
	[[ "$KVER" != "$MODVER" ]] && die "invalid module version $MODVER for kernel $KVER"

[[ -e "$INSTALLDIR/$KVER/$(basename "$PATCH")" ]] && die "$PATCH is already installed"

echo "installing $PATCH ($KVER)"
	mkdir -p "$INSTALLDIR/$KVER" || die "failed to create install directory"
	cp -f "$PATCH" "$INSTALLDIR/$KVER" || die "failed to install module $PATCH"
	systemctl enable kpatch.service
	;;

"uninstall")
	KVER="$(uname -r)"
	shift
	options="$(getopt -o k: -l "kernel-version:" -- "$@")" || die "getopt failed"
	eval set -- "$options"
	while [[ $# -gt 0 ]]; do
		case "$1" in
		-k|--kernel-version)
			KVER="$2"
			shift
			;;
		--)
			[[ -z "$2" ]] && die "no module file specified"
			PATCH="$2"
			[[ "$PATCH" != "$(basename "$PATCH")" ]] && die "please supply patch module name without path"
			;;
		esac
		shift
	done

MODULE="$INSTALLDIR/$KVER/$PATCH"
	if [[ ! -f "$MODULE" ]]; then
		mod_name "$PATCH"
		PATCHNAME="$MODNAME"
		for i in "$INSTALLDIR/$KVER"/*; do
			mod_name "$i"
			if [[ "$MODNAME" == "$PATCHNAME" ]]; then
				MODULE="$i"
				break
			fi
		done
	fi

[[ ! -e "$MODULE" ]] && die "$PATCH is not installed for kernel $KVER"

echo "uninstalling $PATCH ($KVER)"
	rm -f "$MODULE" || die "failed to uninstall module $PATCH"
	;;

"list")
	[[ "$#" -ne 1 ]] && usage
	echo "Loaded patch modules:"
	for module in "$SYSFS"/*; do
		if [[ -e "$module" ]]; then
			modname=$(basename "$module")
			if [[ "$(cat "$module/enabled" 2>/dev/null)" -eq 1 ]]; then
				in_transition "$modname" && state="enabling..." \
							 || state="enabled"
			else
				in_transition "$modname" && state="disabling..." \
							 || state="disabled"
			fi
			echo "$modname [$state]"
		fi
	done
	show_stalled_processes
	echo ""
	echo "Installed patch modules:"
	for kdir in "$INSTALLDIR"/*; do
		[[ -e "$kdir" ]] || continue
		for module in "$kdir"/*.ko; do
			[[ -e "$module" ]] || continue
			mod_name "$module"
			echo "$MODNAME ($(basename "$kdir"))"
		done
	done
	;;

"info")
	[[ "$#" -ne 2 ]] && usage
	PATCH="$2"
	find_module "$PATCH" || die "can't find $PATCH"
	echo "Patch information for $PATCH:"
	modinfo "$MODULE" || die "failed to get info for module $PATCH"
	;;

"signal")
	[[ "$#" -ne 1 ]] && usage
	signal_stalled_processes
	;;

"help"|"-h"|"--help")
	usage
	;;

"version"|"-v"|"--version")
	echo "$VERSION"
	;;

*)
	echo "subcommand $1 not recognized"
	usage
	;;
esac

[+] ..
[-] tc [edit]
[-] iw [edit]
[-] chkconfig [edit]
[-] era_invalidate [edit]
[-] alternatives [edit]
[-] pdata_tools [edit]
[-] pwck [edit]
[-] update-alternatives [edit]
[-] cache_restore [edit]
[-] vigr [edit]
[-] build-locale-archive [edit]
[-] ipset [edit]
[-] zdump [edit]
[-] grubby [edit]
[-] zic [edit]
[-] safe_finger [edit]
[-] ldconfig [edit]
[-] sosreport [edit]
[-] sln [edit]
[-] cache_writeback [edit]
[-] vipw [edit]
[-] glibc_post_upgrade.x86_64 [edit]
[-] cache_repair [edit]
[-] era_check [edit]
[-] logrotate [edit]
[-] iconvconfig [edit]
[-] iconvconfig.x86_64 [edit]
[-] era_restore [edit]
[-] fsck [edit]
[-] install-info [edit]
[-] tcpd [edit]
[-] mkfs [edit]
[-] capsh [edit]
[-] tcpdmatch [edit]
[-] getcap [edit]
[-] try-from [edit]
[-] getpcaps [edit]
[-] fsck.xfs [edit]
[-] setcap [edit]
[-] thin_check [edit]
[-] halt [edit]
[-] sefcontext_compile [edit]
[-] mkfs.xfs [edit]
[-] chroot [edit]
[-] thin_delta [edit]
[-] init [edit]
[-] cracklib-check [edit]
[-] thin_dump [edit]
[-] ifup [edit]
[-] cracklib-format [edit]
[-] iptables-restore [edit]
[-] cracklib-packer [edit]
[-] iptables [edit]
[-] lvm [edit]
[-] cracklib-unpacker [edit]
[-] era_dump [edit]
[-] lchage [edit]
[-] create-cracklib-dict [edit]
[-] iptables-save [edit]
[-] sasldblistusers2 [edit]
[-] xfs_admin [edit]
[-] saslpasswd2 [edit]
[-] xfs_bmap [edit]
[-] mkdict [edit]
[-] xfs_copy [edit]
[-] packer [edit]
[-] xfs_db [edit]
[-] faillock [edit]
[-] xtables-multi [edit]
[-] mkhomedir_helper [edit]
[-] arpd [edit]
[-] lgroupadd [edit]
[-] pam_console_apply [edit]
[-] xfs_estimate [edit]
[-] pam_tally2 [edit]
[-] bridge [edit]
[-] lvs [edit]
[-] pam_timestamp_check [edit]
[-] cbq [edit]
[-] lgroupdel [edit]
[-] pwhistory_helper [edit]
[-] xfs_freeze [edit]
[-] unix_chkpwd [edit]
[-] xfs_fsr [edit]
[-] unix_update [edit]
[-] ctstat [edit]
[-] pvck [edit]
[-] genl-ctrl-list [edit]
[-] devlink [edit]
[-] pvs [edit]
[-] nl-class-add [edit]
[-] genl [edit]
[-] lgroupmod [edit]
[-] nl-class-delete [edit]
[-] ifcfg [edit]
[-] vgck [edit]
[-] nl-class-list [edit]
[-] ifstat [edit]
[-] vgs [edit]
[-] nl-classid-lookup [edit]
[-] xfs_growfs [edit]
[-] nl-cls-add [edit]
[-] ip [edit]
[-] lid [edit]
[-] nl-cls-delete [edit]
[-] xfs_info [edit]
[-] nl-cls-list [edit]
[-] lnstat [edit]
[-] sshd [edit]
[-] nl-link-list [edit]
[-] nstat [edit]
[-] arp [edit]
[-] nl-pktloc-lookup [edit]
[-] routef [edit]
[-] quot [edit]
[-] nl-qdisc-add [edit]
[-] routel [edit]
[-] lshw [edit]
[-] nl-qdisc-delete [edit]
[-] rtacct [edit]
[-] sa [edit]
[-] nl-qdisc-list [edit]
[-] xfs_io [edit]
[-] ethtool [edit]
[-] xfs_logprint [edit]
[-] killall5 [edit]
[-] xfs_mdrestore [edit]
[-] pidof [edit]
[-] xfs_metadump [edit]
[-] cache_check [edit]
[-] xfs_mkfile [edit]
[-] cache_dump [edit]
[-] rtmon [edit]
[-] crda [edit]
[-] cache_metadata_size [edit]
[-] thin_ls [edit]
[-] rtpr [edit]
[-] lnewusers [edit]
[-] thin_metadata_size [edit]
[-] xfs_ncheck [edit]
[-] thin_repair [edit]
[-] selabel_lookup_best_match [edit]
[-] thin_restore [edit]
[-] xfs_quota [edit]
[-] thin_rmap [edit]
[-] xfs_repair [edit]
[-] thin_trim [edit]
[-] xfs_rtcp [edit]
[-] ip6tables [edit]
[-] rtstat [edit]
[-] atd [edit]
[-] ip6tables-restore [edit]
[-] ss [edit]
[-] lpasswd [edit]
[-] ip6tables-save [edit]
[-] luseradd [edit]
[-] installkernel [edit]
[-] new-kernel-pkg [edit]
[-] luserdel [edit]
[-] lusermod [edit]
[-] key.dns_resolver [edit]
[-] request-key [edit]
[-] avcstat [edit]
[-] getenforce [edit]
[-] getsebool [edit]
[-] matchpathcon [edit]
[-] selabel_digest [edit]
[-] selabel_lookup [edit]
[-] semanage [edit]
[-] accton [edit]
[-] selabel_partial_match [edit]
[-] swaplabel [edit]
[-] rngd [edit]
[-] selinux_restorecon [edit]
[-] swapoff [edit]
[-] mtr [edit]
[-] selinuxconlist [edit]
[-] swapon [edit]
[-] lsof [edit]
[-] selinuxdefcon [edit]
[-] switch_root [edit]
[-] rdma [edit]
[-] selinuxenabled [edit]
[-] wipefs [edit]
[-] tcsd [edit]
[-] selinuxexeccon [edit]
[-] dmfilemapd [edit]
[-] setenforce [edit]
[-] dmsetup [edit]
[-] hardlink [edit]
[-] zramctl [edit]
[-] nscd [edit]
[-] addgnupghome [edit]
[-] kpartx [edit]
[-] rndc [edit]
[-] applygnupgdefaults [edit]
[-] dmstats [edit]
[-] biosdecode [edit]
[-] dracut [edit]
[-] dmidecode [edit]
[-] depmod [edit]
[-] ownership [edit]
[-] insmod [edit]
[-] vpddecode [edit]
[-] lsmod [edit]
[-] sgpio [edit]
[-] modinfo [edit]
[-] adduser [edit]
[-] modprobe [edit]
[-] chpasswd [edit]
[-] rmmod [edit]
[-] groupadd [edit]
[-] weak-modules [edit]
[-] groupdel [edit]
[-] poweroff [edit]
[-] groupmems [edit]
[-] reboot [edit]
[-] groupmod [edit]
[-] runlevel [edit]
[-] grpck [edit]
[-] shutdown [edit]
[-] grpconv [edit]
[-] telinit [edit]
[-] grpunconv [edit]
[-] udevadm [edit]
[-] newusers [edit]
[-] arping [edit]
[-] pwconv [edit]
[-] clockdiff [edit]
[-] pwunconv [edit]
[-] ifenslave [edit]
[-] useradd [edit]
[-] ping6 [edit]
[-] userdel [edit]
[-] rdisc [edit]
[-] usermod [edit]
[-] tracepath [edit]
[-] sysctl [edit]
[-] tracepath6 [edit]
[-] addpart [edit]
[-] consoletype [edit]
[-] agetty [edit]
[-] genhostid [edit]
[-] blkdiscard [edit]
[-] ifdown [edit]
[-] blkid [edit]
[-] netreport [edit]
[-] blockdev [edit]
[-] ppp-watch [edit]
[-] cfdisk [edit]
[-] service [edit]
[-] chcpu [edit]
[-] sushell [edit]
[-] clock [edit]
[-] sys-unconfig [edit]
[-] ctrlaltdel [edit]
[-] usernetctl [edit]
[-] delpart [edit]
[-] anacron [edit]
[-] fdformat [edit]
[-] crond [edit]
[-] fdisk [edit]
[-] grub2-set-default [edit]
[-] findfs [edit]
[-] grub2-setpassword [edit]
[-] fsck.cramfs [edit]
[-] fixfiles [edit]
[-] fsck.minix [edit]
[-] genhomedircon [edit]
[-] fsfreeze [edit]
[-] load_policy [edit]
[-] fstrim [edit]
[-] htcacheclean [edit]
[-] hwclock [edit]
[-] semodule [edit]
[-] ldattach [edit]
[-] sestatus [edit]
[-] losetup [edit]
[-] setfiles [edit]
[-] mkfs.cramfs [edit]
[-] setsebool [edit]
[-] mkfs.minix [edit]
[-] dmeventd [edit]
[-] mkswap [edit]
[-] grub2-bios-setup [edit]
[-] nologin [edit]
[-] grub2-install [edit]
[-] partx [edit]
[-] grub2-macbless [edit]
[-] pivot_root [edit]
[-] grub2-mkconfig [edit]
[-] readprofile [edit]
[-] grub2-probe [edit]
[-] resizepart [edit]
[-] grub2-reboot [edit]
[-] rtcwake [edit]
[-] grub2-rpm-sort [edit]
[-] runuser [edit]
[-] dhclient [edit]
[-] sfdisk [edit]
[-] dhclient-script [edit]
[-] sulogin [edit]
[-] blkdeactivate [edit]
[-] grub2-get-kernel-settings [edit]
[-] fuser [edit]
[-] kexec [edit]
[-] makedumpfile [edit]
[-] mkdumprd [edit]
[-] vmcore-dmesg [edit]
[-] grub2-ofpathname [edit]
[-] grub2-sparc64-setup [edit]
[-] fsadm [edit]
[-] lvchange [edit]
[-] lvconvert [edit]
[-] lvcreate [edit]
[-] lvdisplay [edit]
[-] lvextend [edit]
[-] lvmconf [edit]
[-] lvmconfig [edit]
[-] lvmdiskscan [edit]
[-] lvmdump [edit]
[-] lvmetad [edit]
[-] lvmpolld [edit]
[-] lvmsadc [edit]
[-] lvmsar [edit]
[-] lvreduce [edit]
[-] lvremove [edit]
[-] lvrename [edit]
[-] lvresize [edit]
[-] lvscan [edit]
[-] pvchange [edit]
[-] pvcreate [edit]
[-] pvdisplay [edit]
[-] pvmove [edit]
[-] pvremove [edit]
[-] pvresize [edit]
[-] pvscan [edit]
[-] vgcfgbackup [edit]
[-] vgcfgrestore [edit]
[-] vgchange [edit]
[-] vgconvert [edit]
[-] vgcreate [edit]
[-] vgdisplay [edit]
[-] vgexport [edit]
[-] vgextend [edit]
[-] vgimport [edit]
[-] vgimportclone [edit]
[-] vgmerge [edit]
[-] vgmknodes [edit]
[-] vgreduce [edit]
[-] vgremove [edit]
[-] vgrename [edit]
[-] vgscan [edit]
[-] vgsplit [edit]
[-] dmraid [edit]
[-] dmraid.static [edit]
[-] update-smart-drivedb [edit]
[-] dm_dso_reg_tool [edit]
[-] dmevent_tool [edit]
[-] sshd-keygen [edit]
[-] usb_modeswitch [edit]
[-] usb_modeswitch_dispatcher [edit]
[-] abrt-auto-reporting [edit]
[-] abrt-server [edit]
[-] abrtd [edit]
[-] abrt-configuration [edit]
[-] abrt-dbus [edit]
[-] abrt-harvest-pstoreoops [edit]
[-] abrt-harvest-vmcore [edit]
[-] rpcbind [edit]
[-] rpcinfo [edit]
[-] eapol_test [edit]
[-] wpa_cli [edit]
[-] wpa_passphrase [edit]
[-] wpa_supplicant [edit]
[-] NetworkManager [edit]
[-] ether-wake [edit]
[-] ifconfig [edit]
[-] ipmaddr [edit]
[-] iptunnel [edit]
[-] mii-diag [edit]
[-] mii-tool [edit]
[-] nameif [edit]
[-] plipconfig [edit]
[-] route [edit]
[-] slattach [edit]
[-] ebtables [edit]
[-] ebtables-restore [edit]
[-] ebtables-save [edit]
[-] fxload [edit]
[-] plymouth-set-default-theme [edit]
[-] plymouthd [edit]
[-] abrt-install-ccpp-hook [edit]
[-] parted [edit]
[-] partprobe [edit]
[-] waagent [edit]
[-] waagent2.0 [edit]
[-] userhelper [edit]
[-] virt-what [edit]
[-] hypervvssd [edit]
[-] hypervkvpd [edit]
[-] hypervfcopyd [edit]
[-] pm-hibernate [edit]
[-] pm-powersave [edit]
[-] pm-suspend [edit]
[-] pm-suspend-hybrid [edit]
[-] pm-utils-bugreport-info.sh [edit]
[-] rsyslogd [edit]
[-] tuned [edit]
[-] tuned-adm [edit]
[-] setup [edit]
[-] azure-repo-svc [edit]
[-] firewalld [edit]
[-] convertquota [edit]
[-] edquota [edit]
[-] quotacheck [edit]
[-] quotaoff [edit]
[-] quotaon [edit]
[-] quotastats [edit]
[-] repquota [edit]
[-] rpc.rquotad [edit]
[-] setquota [edit]
[-] xqmstats [edit]
[-] cifs.idmap [edit]
[-] cifs.upcall [edit]
[-] mount.cifs [edit]
[-] authconfig [edit]
[-] authconfig-tui [edit]
[-] cacertdir_rehash [edit]
[-] lspci [edit]
[-] setpci [edit]
[-] update-pciids [edit]
[-] audispd [edit]
[-] auditctl [edit]
[-] auditd [edit]
[-] augenrules [edit]
[-] aureport [edit]
[-] ausearch [edit]
[-] autrace [edit]
[-] dnssec-keygen [edit]
[-] ddns-confgen [edit]
[-] dnssec-keyfromlabel [edit]
[-] dnssec-checkds [edit]
[-] dnssec-keymgr [edit]
[-] dnssec-coverage [edit]
[-] dnssec-revoke [edit]
[-] dnssec-dsfromkey [edit]
[-] apachectl [edit]
[-] runq [edit]
[-] dnssec-importkey [edit]
[-] exim [edit]
[-] biosdevname [edit]
[-] dump-acct [edit]
[-] regdbdump [edit]
[-] dump-utmp [edit]
[-] setregdomain [edit]
[-] mdadm [edit]
[-] mdmon [edit]
[-] raid-check [edit]
[-] smartctl [edit]
[-] smartd [edit]
[-] httpd [edit]
[-] atrun [edit]
[-] rotatelogs [edit]
[-] irqbalance [edit]
[-] suexec [edit]
[-] ntpdate [edit]
[-] fcgistarter [edit]
[-] chronyd [edit]
[-] named-checkconf [edit]
[-] intel-microcode2ucode [edit]
[-] modsec-sdbm-util [edit]
[-] kpatch [edit]
[-] mysqld [edit]
[-] cryptsetup [edit]
[-] mysqld-debug [edit]
[-] tcpdump [edit]
[-] exigrep [edit]
[-] tcpslice [edit]
[-] dovecot [edit]
[-] accessdb [edit]
[-] dovecot_cpshutdown [edit]
[-] iprconfig [edit]
[-] exicyclog [edit]
[-] iprdbg [edit]
[-] exim_checkaccess [edit]
[-] iprdump [edit]
[-] exim_dbmbuild [edit]
[-] iprinit [edit]
[-] exim_fixdb [edit]
[-] iprsos [edit]
[-] exim_dumpdb [edit]
[-] iprupdate [edit]
[-] named-checkzone [edit]
[-] yum-complete-transaction [edit]
[-] exim_lock [edit]
[-] yumdb [edit]
[-] exim_tidydb [edit]
[-] badblocks [edit]
[-] eximstats [edit]
[-] debugfs [edit]
[-] exinext [edit]
[-] dumpe2fs [edit]
[-] exiqgrep [edit]
[-] e2freefrag [edit]
[-] exiqsumm [edit]
[-] e2image [edit]
[-] exiwhat [edit]
[-] e2undo [edit]
[-] pdns_server [edit]
[-] e4defrag [edit]
[-] sendmail [edit]
[-] filefrag [edit]
[-] whmapi0 [edit]
[-] logsave [edit]
[-] named-compilezone [edit]
[-] mklost+found [edit]
[-] whmlogin [edit]
[-] resize2fs [edit]
[-] fsck.vfat [edit]
[-] mkfs.vfat [edit]
[-] brctl [edit]
[-] genrandom [edit]
[-] whmapi1 [edit]
[-] e2fsck [edit]
[-] fsck.ext2 [edit]
[-] fsck.ext3 [edit]
[-] fsck.ext4 [edit]
[-] dnssec-verify [edit]
[-] gss-server [edit]
[-] e2label [edit]
[-] tune2fs [edit]
[-] mkdosfs [edit]
[-] mkfs.msdos [edit]
[-] chgpasswd [edit]
[-] isc-hmac-fixup [edit]
[-] exportfs [edit]
[-] mke2fs [edit]
[-] mkfs.ext2 [edit]
[-] mkfs.ext3 [edit]
[-] mkfs.ext4 [edit]
[-] paperconfig [edit]
[-] xfsdump [edit]
[-] sim_server [edit]
[-] xfsinvutil [edit]
[-] uuserver [edit]
[-] xfsrestore [edit]
[-] pure-certd [edit]
[-] visudo [edit]
[-] pure-authd [edit]
[-] btrfs [edit]
[-] named-journalprint [edit]
[-] btrfs-convert [edit]
[-] nsec3hash [edit]
[-] btrfs-debug-tree [edit]
[-] rndc-confgen [edit]
[-] btrfs-find-root [edit]
[-] pure-ftpwho [edit]
[-] btrfs-image [edit]
[-] tsig-keygen [edit]
[-] btrfs-map-logical [edit]
[-] named [edit]
[-] btrfs-select-super [edit]
[-] lwresd [edit]
[-] btrfs-zero-log [edit]
[-] pure-config.pl [edit]
[-] btrfsck [edit]
[-] pure-ftpd [edit]
[-] btrfstune [edit]
[-] pure-quotacheck [edit]
[-] fsck.btrfs [edit]
[-] pure-mrtginfo [edit]
[-] mkfs.btrfs [edit]
[-] pure-uploadscript [edit]
[-] ledctl [edit]
[-] gssproxy [edit]
[-] ledmon [edit]
[-] mount.nfs [edit]
[-] ntsysv [edit]
[-] mount.nfs4 [edit]
[-] rfkill [edit]
[-] osd_login [edit]
[-] dosfsck [edit]
[-] rpc.statd [edit]
[-] dosfslabel [edit]
[-] umount.nfs [edit]
[-] fatlabel [edit]
[-] umount.nfs4 [edit]
[-] fsck.fat [edit]
[-] blkmapd [edit]
[-] fsck.msdos [edit]
[-] aad_certhandler [edit]
[-] mkfs.fat [edit]
[-] dnssec-settime [edit]
[-] dnssec-signzone [edit]
[-] restorecon [edit]
[-] mountstats [edit]
[-] nfsdcltrack [edit]
[-] nfsidmap [edit]
[-] nfsiostat [edit]
[-] nfsstat [edit]
[-] rpc.gssd [edit]
[-] rpc.idmapd [edit]
[-] rpc.mountd [edit]
[-] rpc.nfsd [edit]
[-] rpcdebug [edit]
[-] showmount [edit]
[-] sm-notify [edit]
[-] start-statd [edit]
[-] cgdisk [edit]
[-] fixparts [edit]
[-] gdisk [edit]
[-] sgdisk [edit]
[-] aaduseradd [edit]
[-] aaduserdel [edit]
[-] start-stop-daemon [edit]