# gradm2 - Administration program for the grsecurity RBAC system - man(8) - [phpMan]

[_GRADM_(8)](https://www.chedong.com/phpMan.php/man/GRADM/8/markdown)                               System Manager's Manual                              [_GRADM_(8)](https://www.chedong.com/phpMan.php/man/GRADM/8/markdown)

## NAME
       gradm - Administration program for the grsecurity RBAC system

## SYNOPSIS
       **gradm  **[  **-E  **]  [  **-R  **] [ **-C **] [ **-F **] [ **-L <logfile> **] [ **-O <filename|stream> **] [ **-M **<file‐
       name|uid> ] [ **-D **] [ **-P [rolename] **] [ **-a <rolename> **] [ **-n <rolename> **] [ **-p <rolename> **]  [
### -u  -V  -h  -v 


## DESCRIPTION
       _gradm_ is the userspace RBAC parsing and authentication program for _grsecurity_

       grsecurity aims to be a complete security system for Linux 2.4.  gradm performs several tasks
       for the RBAC system including authenticated via a password to the kernel and parsing rules to
       be passed to the kernel.


## OPTIONS
       All options to gradm are mutually exclusive, except for -L and -O.

### -E     

### -R     

### -C     
              formed when enabling.

### -F     
              learning mode.  If used with -L and -O, it parses the full learning logs and generates
              a complete ruleset.

### -M <filename|uid>
              Remove  an  execution ban on a given uid or filename that has been put in place by the
              RES_CRASH resource restriction of the RBAC system.

### -L <logfile>
              Parses the learning logs.  Accepts an argument which specifies the logfile to scan for
              the learning logs.  If "-" is specified as the logfile, stdin  will  be  used  as  the
              learning log.  This option can be used with -E, -O, or -F.

### -O <filename|stream>
              Specifies  output mode.  Requires a single argument that can be "stdout", "stderr", or
              a regular file.  Only used with -L or -F.

### -D     

### -P [rolename]
              Without an argument, it sets the password for administering the RBAC system.   With  a
              role name as an argument, it sets the password for that given special role.

### -a <rolename>
              Authenticate to a special role that requires a password.

### -n <rolename>
              Authenticate to a special role that does not require a password.

### -p <rolename>
              Authenticate through PAM to a special role.

### -u     
              lection.   To  be used, for instance, for logging out of an admin role without exiting
              your shell.

### -V     
              policy.  Can only be used with -C, -E, or -F -L <filename>

### -h     

### -v     

       **REPORTING BUGS**
              Please  include as much information as possible(using any available debugging options)
              and send bug reports for gradm  or  the  grsecurity  RBAC  system  to  **spender@grsecu‐**
              **rity.net.**


## AUTHOR
       **grsecurity  and  gradm  **were  created  and  are  maintained by Brad Spengler <spender@grsecu‐
       rity.net>

                                                                                            [_GRADM_(8)](https://www.chedong.com/phpMan.php/man/GRADM/8/markdown)