# gradm(8) - man - phpMan

[GRADM(8)](https://www.chedong.com/phpMan.php/man/GRADM/8/markdown)                               System Manager's Manual                              [GRADM(8)](https://www.chedong.com/phpMan.php/man/GRADM/8/markdown)



## NAME
       gradm - Administration program for the grsecurity RBAC system

## SYNOPSIS
       **gradm**  [  **-E**  ]  [  **-R**  ] [ **-C** ] [ **-F** ] [ **-L** **<logfile>** ] [ **-O** **<filename|stream>** ] [ **-M** <file‐
       name|uid> ] [ **-D** ] [ **-P** **[rolename]** ] [ **-a** **<rolename>** ] [ **-n** **<rolename>** ] [ **-p** **<rolename>** ]  [
### -u -V -h -v


## DESCRIPTION
       _gradm_ is the userspace RBAC parsing and authentication program for _grsecurity_

       grsecurity aims to be a complete security system for Linux 2.4.  gradm performs several tasks
       for the RBAC system including authenticated via a password to the kernel and parsing rules to
       be passed to the kernel.


## OPTIONS
       All options to gradm are mutually exclusive, except for -L and -O.

### -E


### -R


### -C
              formed when enabling.


### -F
              learning mode.  If used with -L and -O, it parses the full learning logs and generates
              a complete ruleset.


### -M <filename|uid>
              Remove an execution ban on a given uid or filename that has been put in place  by  the
              RES_CRASH resource restriction of the RBAC system.


### -L <logfile>
              Parses the learning logs.  Accepts an argument which specifies the logfile to scan for
              the learning logs.  If "-" is specified as the logfile, stdin  will  be  used  as  the
              learning log.  This option can be used with -E, -O, or -F.


### -O <filename|stream>
              Specifies  output mode.  Requires a single argument that can be "stdout", "stderr", or
              a regular file.  Only used with -L or -F.


### -D


### -P [rolename]
              Without an argument, it sets the password for administering the RBAC system.   With  a
              role name as an argument, it sets the password for that given special role.


### -a <rolename>
              Authenticate to a special role that requires a password.


### -n <rolename>
              Authenticate to a special role that does not require a password.


### -p <rolename>
              Authenticate through PAM to a special role.


### -u
              lection.  To be used, for instance, for logging out of an admin role  without  exiting
              your shell.


### -V
              policy.  Can only be used with -C, -E, or -F -L <filename>


### -h


### -v





## REPORTING BUGS
       Please include as much information as possible(using any  available  debugging  options)  and
       send bug reports for gradm or the grsecurity RBAC system to **<spender@grsecurity.net>.**


## AUTHOR
       **grsecurity**  **and**  **gradm**  were  created  and  are  maintained by Brad Spengler <spender@grsecu‐
       rity.net>



                                                                                            [GRADM(8)](https://www.chedong.com/phpMan.php/man/GRADM/8/markdown)