1FAPOLICYD-CLI(1)        System Administration Utilities       FAPOLICYD-CLI(1)
2
3
4

NAME

6       fapolicyd-cli - Fapolicyd CLI Tool
7

SYNOPSIS

9       fapolicyd-cli [options]
10

DESCRIPTION

12       The fapolicyd command line utility is a tool to tell the daemon that it
13       needs to update the trust database. Normally, the  daemon  learns  that
14       the  trust  database  needs  updating  because  it uses a dnf plugin to
15       inform it. However, you may install an rpm by hand  and  it  can't  see
16       that  a  system  package was installed or updated. Or perhaps the admin
17       updates the fapolicyd.trust file and would like  the  changes  to  take
18       effect  immediately.  In  either of these cases, you would need to tell
19       the daemon that it needs to do an update by running this command.
20

OPTIONS

22       -h, --help
23              Prints a list of command line options.
24
25       -d, --delete-db
26              Deletes the trust database. Normally  this  never  needs  to  be
27              done.  But  if  for  some reason the trust database becomes cor‐
28              rupted, then the only method of recovery is to run this command.
29
30       -f, --file [add] [path]
31              Manage the file trust database.
32
33              add         This command adds the file  given  by  path  to  the
34                          trust  database. It gets the size and calculates the
35                          required SHA256 hash. If the path is a directory, it
36                          will  walk  the directory tree to the bottom and add
37                          every regular file that it finds.
38
39              delete      This command deletes all entries that match from the
40                          trust database. It will try to match mutiple entries
41                          so that entire directories can  be  deleted  in  one
42                          command.  To  ensure that you only match a directory
43                          and not a partial name, be sure to end with '/'.
44
45              update      This command updates the size and hash of any match‐
46                          ing  paths in the file trust database. If no path is
47                          given, then all files are updated. If an argument is
48                          passed, then only matching paths get updated. If the
49                          intent is to match against a directory, ensure  that
50                          it ends with '/'.
51
52       -t, --ftype /path/to/file
53              Prints  the  mime  type  of  the file given. A full path must be
54              specified. This command is intended to help get the ftype param‐
55              eter  of rules correct by seeing how fapolicyd will classify it.
56              Fapolicyd may differ from the file command.
57
58       -l, --list
59              Prints a listing of the fapolicyd rules file with a rule  number
60              to  aid  in  troubleshooting  or understanding of the debug mes‐
61              sages.
62
63       -u, --update
64              Notifies fapolicyd to perform an update of the trust database.
65

SEE ALSO

67       fapolicyd(8),  fapolicyd.rules(5),  fapolicyd.trust(5),   and   fapoli‐
68       cyd.conf(5)
69
70

AUTHOR

72       Zoltan Fridrich
73
74
75
76Red Hat                           March 2020                  FAPOLICYD-CLI(1)
Impressum