1FAPOLICYD-CLI(1) System Administration Utilities FAPOLICYD-CLI(1)
2
3
4
6 fapolicyd-cli - Fapolicyd CLI Tool
7
9 fapolicyd-cli [options]
10
12 The fapolicyd command line utility is a tool to tell the daemon that it
13 needs to update the trust database. Normally, the daemon learns that
14 the trust database needs updating because it uses a dnf plugin to
15 inform it. However, you may install an rpm by hand and it can't see
16 that a system package was installed or updated. Or perhaps the admin
17 updates the fapolicyd.trust file and would like the changes to take
18 effect immediately. In either of these cases, you would need to tell
19 the daemon that it needs to do an update by running this command.
20
22 -h, --help
23 Prints a list of command line options.
24
25 -d, --delete-db
26 Deletes the trust database. Normally this never needs to be
27 done. But if for some reason the trust database becomes cor‐
28 rupted, then the only method of recovery is to run this command.
29
30 -f, --file [add] [path]
31 Manage the file trust database.
32
33 add This command adds the file given by path to the
34 trust database. It gets the size and calculates the
35 required SHA256 hash. If the path is a directory, it
36 will walk the directory tree to the bottom and add
37 every regular file that it finds.
38
39 delete This command deletes all entries that match from the
40 trust database. It will try to match mutiple entries
41 so that entire directories can be deleted in one
42 command. To ensure that you only match a directory
43 and not a partial name, be sure to end with '/'.
44
45 update This command updates the size and hash of any match‐
46 ing paths in the file trust database. If no path is
47 given, then all files are updated. If an argument is
48 passed, then only matching paths get updated. If the
49 intent is to match against a directory, ensure that
50 it ends with '/'.
51
52 -t, --ftype /path/to/file
53 Prints the mime type of the file given. A full path must be
54 specified. This command is intended to help get the ftype param‐
55 eter of rules correct by seeing how fapolicyd will classify it.
56 Fapolicyd may differ from the file command.
57
58 -l, --list
59 Prints a listing of the fapolicyd rules file with a rule number
60 to aid in troubleshooting or understanding of the debug mes‐
61 sages.
62
63 -u, --update
64 Notifies fapolicyd to perform an update of the trust database.
65
67 fapolicyd(8), fapolicyd.rules(5), fapolicyd.trust(5), and fapoli‐
68 cyd.conf(5)
69
70
72 Zoltan Fridrich
73
74
75
76Red Hat March 2020 FAPOLICYD-CLI(1)