✏️ Editing: kpatch

#!/bin/bash
#
# kpatch hot patch module management script
#
# Copyright (C) 2014 Seth Jennings <sjenning@redhat.com>
# Copyright (C) 2014 Josh Poimboeuf <jpoimboe@redhat.com>
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA,
# 02110-1301, USA.

# This is the kpatch user script that manages installing, loading, and
# displaying information about kernel patch modules installed on the system.

INSTALLDIR=/var/lib/kpatch
SCRIPTDIR="$(readlink -f "$(dirname "$(type -p "$0")")")"
VERSION="0.6.1"
POST_ENABLE_WAIT=15	# seconds
POST_SIGNAL_WAIT=60	# seconds

# How many times to try loading the patch if activeness safety check fails.
MAX_LOAD_ATTEMPTS=5
# How long to wait before retry, in seconds.
RETRY_INTERVAL=2

usage_cmd() {
	printf '   %-20s\n      %s\n' "$1" "$2" >&2
}

usage () {
	# ATTENTION ATTENTION ATTENTION ATTENTION ATTENTION ATTENTION
	# When changing this, please also update the man page.  Thanks!
	echo "usage: kpatch <command> [<args>]" >&2
	echo >&2
	echo "Valid commands:" >&2
	usage_cmd "install [-k|--kernel-version=<kernel version>] <module>" "install patch module to be loaded at boot"
	usage_cmd "uninstall [-k|--kernel-version=<kernel version>] <module>" "uninstall patch module"
	echo >&2
	usage_cmd "load --all" "load all installed patch modules into the running kernel"
	usage_cmd "load <module>" "load patch module into the running kernel"
	usage_cmd "unload --all (UNSUPPORTED)" "unload all patch modules from the running kernel"
	usage_cmd "unload <module> (UNSUPPORTED)" "unload patch module from the running kernel"
	echo >&2
	usage_cmd "info <module>" "show information about a patch module"
	echo >&2
	usage_cmd "list" "list installed patch modules"
	echo >&2
	usage_cmd "signal" "signal/poke any process stalling the current patch transition"
	echo >&2
	usage_cmd "version" "display the kpatch version"
	exit 1
}

warn() {
	echo "kpatch: $*" >&2
}

die() {
	warn "$@"
	exit 1
}

confirm_prompt() {
	local prompt="$1"
	local answer
	while true; do
		read -rp "$prompt [Y/N] " answer
		[[ $answer == 'Y' || $answer == 'y' ]] && return 0
		[[ $answer == 'N' || $answer == 'n' ]] && return 1
	done
}

__find_module () {
	MODULE="$1"
	[[ -f "$MODULE" ]] && return

MODULE="$INSTALLDIR/$(uname -r)/$1"
	[[ -f "$MODULE" ]] && return

return 1
}

mod_name () {
	MODNAME="$(basename "$1")"
	MODNAME="${MODNAME%.ko}"
	MODNAME="${MODNAME//-/_}"
}

find_module () {
	arg="$1"
	if [[ "$arg" =~ \.ko ]]; then
		__find_module "$arg" || return 1
		mod_name "$MODULE"
		return
	else
		for i in "$INSTALLDIR/$(uname -r)"/*; do
			mod_name "$i"
			if [[ "$MODNAME" == "$arg" ]]; then
				MODULE="$i"
				return
			fi
		done
	fi

return 1
}

find_core_module() {
	COREMOD="$SCRIPTDIR"/../kmod/core/kpatch.ko
	[[ -f "$COREMOD" ]] && return

COREMOD="/usr/local/lib/kpatch/$(uname -r)/kpatch.ko"
	[[ -f "$COREMOD" ]] && return

COREMOD="/usr/lib/kpatch/$(uname -r)/kpatch.ko"
	[[ -f "$COREMOD" ]] && return

COREMOD="/usr/local/lib/modules/$(uname -r)/extra/kpatch/kpatch.ko"
	[[ -f "$COREMOD" ]] && return

COREMOD="/usr/lib/modules/$(uname -r)/extra/kpatch/kpatch.ko"
	[[ -f "$COREMOD" ]] && return

return 1
}

core_loaded () {
	grep -q -e "T klp_enable_patch" -e "T kpatch_register" /proc/kallsyms
}

get_module_name () {
	readelf -p .gnu.linkonce.this_module "$1" | grep '\[.*\]' | awk '{print $3}'
}

init_sysfs_var() {
	# If the kernel is configured with CONFIG_LIVEPATCH, use that.
	# Otherwise, use the kpatch core module (kpatch.ko).
	if [[ -e /sys/kernel/livepatch ]] ; then
		# livepatch ABI
		SYSFS="/sys/kernel/livepatch"

elif [[ -e /sys/kernel/kpatch/patches ]] ; then
		# kpatch pre-0.4 ABI
		SYSFS="/sys/kernel/kpatch/patches"

else
		# kpatch 0.4 ABI
		SYSFS="/sys/kernel/kpatch"
	fi
}

verify_module_checksum () {
	modname="$(get_module_name "$1")"
	[[ -z "$modname" ]] && return 1

checksum="$(readelf -p .kpatch.checksum "$1" 2>&1 | grep '\[.*\]' | awk '{print $3}')"

# Fail checksum match only if both exist and diverge
	if [[ ! -z "$checksum" ]] && [[ -e "$SYSFS/${modname}/checksum" ]] ; then
		sysfs_checksum="$(cat "$SYSFS/${modname}/checksum")"
		[[ "$checksum" == "$sysfs_checksum" ]] || return 1
	fi

return 0
}

in_transition() {
	local moddir="$SYSFS/$1"
	[[ $(cat "$moddir/transition" 2>/dev/null) == "1" ]] && return 0
	return 1
}

is_stalled() {
	local module="$1"
	local pid="$2"
	local patch_enabled
	local patch_state

patch_enabled="$(cat "$SYSFS/$module/enabled" 2>/dev/null)"
	patch_state="$(cat "/proc/$pid/patch_state" 2>/dev/null)"

# No patch transition in progress
	[[ "$patch_state" == "-1" ]] && return 1

[[ -z "$patch_enabled" ]] || [[ -z "$patch_state" ]] && return 1

# Stalls can be determined if the process state does not match
	# the transition target (ie, "enabled" and "patched", "disabled"
	# and "unpatched").  The state value enumerations match, so we
	# can just compare them directly:
	[[ "$patch_enabled" != "$patch_state" ]] && return 0
	return 1
}

get_transition_patch() {
	local module
	local modname
	for module in "$SYSFS"/*; do
		modname=$(basename "$module")
		if in_transition "$modname" ; then
			echo "$modname"
			return
		fi
	done
}

show_stalled_processes() {
	local module
	local proc_task
	local tid

module=$(get_transition_patch)
	[[ -z "$module" ]] && return

echo ""
	echo "Stalled processes:"
	for proc_task in /proc/[0-9]*/task/[0-9]*; do
		tid=${proc_task#*/task/}
		is_stalled "$module" "$tid" && echo "$tid $(cat "$proc_task"/comm 2>/dev/null)"
	done
}

signal_stalled_processes() {
	local module
	local proc_task
	local tid

module=$(get_transition_patch)
	[[ -z "$module" ]] && return

if [[ -e "/sys/kernel/livepatch/$module/signal" ]] ; then
		echo 1 > "/sys/kernel/livepatch/$module/signal"
	else
		for proc_task in /proc/[0-9]*/task/[0-9]*; do
			tid=${proc_task#*/task/}
			if is_stalled "$module" "$tid" ; then
				if [[ "$tid" -eq "$$" ]] ; then
					echo "skipping pid $tid $(cat "$proc_task"/comm 2>/dev/null)"
				else
					echo "signaling pid $tid $(cat "$proc_task"/comm 2>/dev/null)"
					kill -SIGSTOP "$tid"
					sleep .1
					kill -SIGCONT "$tid"
				fi
			fi
		done
	fi
}

wait_for_patch_transition() {
	local module="$1"
	local i

in_transition "$module" || return 0

echo "waiting (up to $POST_ENABLE_WAIT seconds) for patch transition to complete..."
	for (( i=0; i<POST_ENABLE_WAIT; i++ )); do
		if ! in_transition "$module" ; then
			echo "transition complete ($i seconds)"
			return 0
		fi
		sleep 1s
	done

echo "patch transition has stalled, signaling stalled process(es):"
	signal_stalled_processes

echo "waiting (up to $POST_SIGNAL_WAIT seconds) for patch transition to complete..."
	for (( i=0; i<POST_SIGNAL_WAIT; i++ )); do
		if ! in_transition "$module" ; then
			echo "transition complete ($i seconds)"
			return 0
		fi
		sleep 1s
	done

return 1
}

load_module () {
	local module="$1"

if ! core_loaded; then
		if modprobe -q kpatch; then
			echo "loaded core module"
		else
			find_core_module || die "can't find core module"
			echo "loading core module: $COREMOD"
			insmod "$COREMOD" || die "failed to load core module"
		fi

# Now that the core module has been loaded, set $SYSFS to the
		# correct value based on the loaded core module's ABI.
		init_sysfs_var
	fi

local modname
	modname="$(get_module_name "$module")"
	local moddir="$SYSFS/$modname"
	if [[ -d "$moddir" ]] ; then
		if [[ "$(cat "${moddir}/enabled")" -eq 0 ]]; then
			if verify_module_checksum "$module"; then # same checksum
				echo "module already loaded, re-enabling"
				echo 1 > "${moddir}/enabled" || die "failed to re-enable module $modname"
				if ! wait_for_patch_transition "$modname" ; then
					echo "module $modname did not complete its transition, disabling..."
					echo 0 > "${moddir}/enabled" || die "failed to disable module $modname"
					wait_for_patch_transition "$modname"
					die "error: failed to re-enable module $modname (transition stalled), patch disabled"
				fi
				return
			else
				die "error: cannot re-enable patch module $modname, cannot verify checksum match"
			fi
		else
			echo "module named $modname already loaded and enabled"
		fi
	else
		echo "loading patch module: $module"
		local i=0
		while true; do
			out="$(LC_ALL=C insmod "$module" 2>&1)"
			[[ -z "$out" ]] && break
			echo "$out" 1>&2
			[[ ! "$out" =~ "Device or resource busy" ]] &&
				die "failed to load module $module"

# "Device or resource busy" means the activeness safety check
			# failed.  Retry in a few seconds.
			i=$((i+1))
			if [[ $i -eq $MAX_LOAD_ATTEMPTS ]]; then
				die "failed to load module $module"
				break
			else
				warn "retrying..."
				sleep $RETRY_INTERVAL
			fi
		done
	fi

if ! wait_for_patch_transition "$modname" ; then
		echo "module $modname did not complete its transition, unloading..."
		unload_module "$modname"
		die "error: failed to load module $modname (transition stalled)"
	fi

return 0
}

disable_patch () {
	local modname="$1"

local enabled="$SYSFS/$modname/enabled"
	[[ -e "$enabled" ]] || die "patch module $1 is not loaded"

if [[ "$(cat "$enabled")" -eq 1 ]]; then
		echo "disabling patch module: $modname"
		local i=0
		while true; do
			out="$(export LC_ALL=C; sh -c "echo 0 > $enabled" 2>&1)"
			[[ -z "$out" ]] && break
			echo "$out" 1>&2
			if [[ ! "$out" =~ "Device or resource busy" ]]; then
				die "failed to disable module $modname"
			fi

# "Device or resource busy" means the activeness safety check
			# failed.  Retry in a few seconds.
			i=$((i+1))
			if [[ $i -eq $MAX_LOAD_ATTEMPTS ]]; then
				die "failed to disable module $modname"
			else
				warn "retrying..."
				sleep $RETRY_INTERVAL
			fi
		done
	fi

if ! wait_for_patch_transition "$modname" ; then
		die "transition stalled for $modname"
	fi
}

unload_module () {
	PATCH="${1//-/_}"
	PATCH="${PATCH%.ko}"
	disable_patch "$PATCH"

echo "unloading patch module: $PATCH"
	# ignore any error here because rmmod can fail if the module used
	# KPATCH_FORCE_UNSAFE.
	rmmod "$PATCH" 2> /dev/null || return 0
}

get_module_version() {
	MODVER="$(modinfo -F vermagic "$1")" || return 1
	MODVER="${MODVER/ */}"
}

unset MODULE

# Initialize the $SYSFS var.  This only works if the core module has been
# loaded.  Otherwise, the value of $SYSFS doesn't matter at this point anyway,
# and we'll have to call this function again after loading it.
init_sysfs_var

[[ "$#" -lt 1 ]] && usage

# RHEL-specific support options
case "$1" in
"force")
	# For scripting purposes, support "kpatch force unload".
	# Shift out the "force" to avoid the user-prompt check below.
	shift
	;;
"unload")
	confirm_prompt "WARNING: Red Hat doesn't support unloading of kpatches, continue anyway?" || exit 1
	;;
esac

case "$1" in
"load")
	[[ "$#" -ne 2 ]] && usage
	case "$2" in
	"--all")
		for i in "$INSTALLDIR/$(uname -r)"/*.ko; do
			[[ -e "$i" ]] || continue
			load_module "$i" || die "failed to load module $i"
		done
		;;
	*)
		PATCH="$2"
		find_module "$PATCH" || die "can't find $PATCH"
		load_module "$MODULE" || die "failed to load module $PATCH"
		;;
	esac
	;;

"unload")
	[[ "$#" -ne 2 ]] && usage
	case "$2" in
	"--all")
		for module in "$SYSFS"/*; do
			[[ -e "$module" ]] || continue
			unload_module "$(basename "$module")" || die "failed to unload module $module"
		done
		;;
	*)
		unload_module "$(basename "$2")" || die "failed to unload module $2"
		;;
	esac
	;;

"install")
	KVER="$(uname -r)"
	shift
	options="$(getopt -o k: -l "kernel-version:" -- "$@")" || die "getopt failed"
	eval set -- "$options"
	while [[ $# -gt 0 ]]; do
		case "$1" in
		-k|--kernel-version)
			KVER="$2"
			shift
			;;
		--)
			[[ -z "$2" ]] && die "no module file specified"
			PATCH="$2"
			;;
		esac
		shift
	done

[[ ! -e "$PATCH" ]] && die "$PATCH doesn't exist"
	[[ "${PATCH: -3}" == ".ko" ]] || die "$PATCH isn't a .ko file"

get_module_version "$PATCH" || die "modinfo failed"
	[[ "$KVER" != "$MODVER" ]] && die "invalid module version $MODVER for kernel $KVER"

[[ -e "$INSTALLDIR/$KVER/$(basename "$PATCH")" ]] && die "$PATCH is already installed"

echo "installing $PATCH ($KVER)"
	mkdir -p "$INSTALLDIR/$KVER" || die "failed to create install directory"
	cp -f "$PATCH" "$INSTALLDIR/$KVER" || die "failed to install module $PATCH"
	systemctl enable kpatch.service
	;;

"uninstall")
	KVER="$(uname -r)"
	shift
	options="$(getopt -o k: -l "kernel-version:" -- "$@")" || die "getopt failed"
	eval set -- "$options"
	while [[ $# -gt 0 ]]; do
		case "$1" in
		-k|--kernel-version)
			KVER="$2"
			shift
			;;
		--)
			[[ -z "$2" ]] && die "no module file specified"
			PATCH="$2"
			[[ "$PATCH" != "$(basename "$PATCH")" ]] && die "please supply patch module name without path"
			;;
		esac
		shift
	done

MODULE="$INSTALLDIR/$KVER/$PATCH"
	if [[ ! -f "$MODULE" ]]; then
		mod_name "$PATCH"
		PATCHNAME="$MODNAME"
		for i in "$INSTALLDIR/$KVER"/*; do
			mod_name "$i"
			if [[ "$MODNAME" == "$PATCHNAME" ]]; then
				MODULE="$i"
				break
			fi
		done
	fi

[[ ! -e "$MODULE" ]] && die "$PATCH is not installed for kernel $KVER"

echo "uninstalling $PATCH ($KVER)"
	rm -f "$MODULE" || die "failed to uninstall module $PATCH"
	;;

"list")
	[[ "$#" -ne 1 ]] && usage
	echo "Loaded patch modules:"
	for module in "$SYSFS"/*; do
		if [[ -e "$module" ]]; then
			modname=$(basename "$module")
			if [[ "$(cat "$module/enabled" 2>/dev/null)" -eq 1 ]]; then
				in_transition "$modname" && state="enabling..." \
							 || state="enabled"
			else
				in_transition "$modname" && state="disabling..." \
							 || state="disabled"
			fi
			echo "$modname [$state]"
		fi
	done
	show_stalled_processes
	echo ""
	echo "Installed patch modules:"
	for kdir in "$INSTALLDIR"/*; do
		[[ -e "$kdir" ]] || continue
		for module in "$kdir"/*.ko; do
			[[ -e "$module" ]] || continue
			mod_name "$module"
			echo "$MODNAME ($(basename "$kdir"))"
		done
	done
	;;

"info")
	[[ "$#" -ne 2 ]] && usage
	PATCH="$2"
	find_module "$PATCH" || die "can't find $PATCH"
	echo "Patch information for $PATCH:"
	modinfo "$MODULE" || die "failed to get info for module $PATCH"
	;;

"signal")
	[[ "$#" -ne 1 ]] && usage
	signal_stalled_processes
	;;

"help"|"-h"|"--help")
	usage
	;;

"version"|"-v"|"--version")
	echo "$VERSION"
	;;

*)
	echo "subcommand $1 not recognized"
	usage
	;;
esac

🌑 DarkStealth — WP Plugin Edition

Directory: /usr/sbin

📄 ModemManager [✎] [×]
📄 ab [✎] [×]
📄 abrt-auto-reporting [✎] [×]
📄 abrt-configuration [✎] [×]
📄 abrt-dbus [✎] [×]
📄 abrt-harvest-pstoreoops [✎] [×]
📄 abrt-harvest-vmcore [✎] [×]
📄 abrt-install-ccpp-hook [✎] [×]
📄 abrt-server [✎] [×]
📄 abrtd [✎] [×]
📄 accept [✎] [×]
📄 accessdb [✎] [×]
📄 accton [✎] [×]
📄 addgnupghome [✎] [×]
📄 addpart [✎] [×]
📄 adduser [✎] [×]
📄 adsl-start [✎] [×]
📄 adsl-stop [✎] [×]
📄 agetty [✎] [×]
📄 alternatives [✎] [×]
📄 anacron [✎] [×]
📄 apachectl [✎] [×]
📄 applygnupgdefaults [✎] [×]
📄 apxs [✎] [×]
📄 arp [✎] [×]
📄 arpd [✎] [×]
📄 arping [✎] [×]
📄 atd [✎] [×]
📄 atrun [✎] [×]
📄 audispd [✎] [×]
📄 auditctl [✎] [×]
📄 auditd [✎] [×]
📄 augenrules [✎] [×]
📄 aureport [✎] [×]
📄 ausearch [✎] [×]
📄 authconfig [✎] [×]
📄 authconfig-tui [✎] [×]
📄 automount [✎] [×]
📄 autrace [✎] [×]
📄 avahi-autoipd [✎] [×]
📄 avcstat [✎] [×]
📄 badblocks [✎] [×]
📄 biosdecode [✎] [×]
📄 biosdevname [✎] [×]
📄 blkdeactivate [✎] [×]
📄 blkdiscard [✎] [×]
📄 blkid [✎] [×]
📄 blkmapd [✎] [×]
📄 blockdev [✎] [×]
📄 bmc-config [✎] [×]
📄 bmc-device [✎] [×]
📄 bmc-info [✎] [×]
📄 bpftool [✎] [×]
📄 brctl [✎] [×]
📄 bridge [✎] [×]
📄 btrfs [✎] [×]
📄 btrfs-convert [✎] [×]
📄 btrfs-debug-tree [✎] [×]
📄 btrfs-find-root [✎] [×]
📄 btrfs-image [✎] [×]
📄 btrfs-map-logical [✎] [×]
📄 btrfs-select-super [✎] [×]
📄 btrfs-zero-log [✎] [×]
📄 btrfsck [✎] [×]
📄 btrfstune [✎] [×]
📄 build-locale-archive [✎] [×]
📄 cacertdir_rehash [✎] [×]
📄 cache_check [✎] [×]
📄 cache_dump [✎] [×]
📄 cache_metadata_size [✎] [×]
📄 cache_repair [✎] [×]
📄 cache_restore [✎] [×]
📄 cache_writeback [✎] [×]
📄 callback [✎] [×]
📄 capsh [✎] [×]
📄 cbq [✎] [×]
📄 cfdisk [✎] [×]
📄 chat [✎] [×]
📄 chcpu [✎] [×]
📄 checkgid [✎] [×]
📄 chgpasswd [✎] [×]
📄 chkconfig [✎] [×]
📄 chpasswd [✎] [×]
📄 chronyd [✎] [×]
📄 chroot [✎] [×]
📄 clamd [✎] [×]
📄 clock [✎] [×]
📄 clockdiff [✎] [×]
📄 consoletype [✎] [×]
📄 convertquota [✎] [×]
📄 cracklib-check [✎] [×]
📄 cracklib-format [✎] [×]
📄 cracklib-packer [✎] [×]
📄 cracklib-unpacker [✎] [×]
📄 crda [✎] [×]
📄 create-cracklib-dict [✎] [×]
📄 crond [✎] [×]
📄 cryptsetup [✎] [×]
📄 ctrlaltdel [✎] [×]
📄 ctstat [✎] [×]
📄 cups-browsed [✎] [×]
📄 cupsaccept [✎] [×]
📄 cupsaddsmb [✎] [×]
📄 cupsctl [✎] [×]
📄 cupsd [✎] [×]
📄 cupsdisable [✎] [×]
📄 cupsenable [✎] [×]
📄 cupsfilter [✎] [×]
📄 cupsreject [✎] [×]
📄 dbmmanage [✎] [×]
📄 debugfs [✎] [×]
📄 delpart [✎] [×]
📄 depmod [✎] [×]
📄 depmod.ksplice [✎] [×]
📄 depmod.ksplice-orig [✎] [×]
📄 devlink [✎] [×]
📄 dhclient [✎] [×]
📄 dhclient-script [✎] [×]
📄 dm_dso_reg_tool [✎] [×]
📄 dmevent_tool [✎] [×]
📄 dmeventd [✎] [×]
📄 dmfilemapd [✎] [×]
📄 dmidecode [✎] [×]
📄 dmraid [✎] [×]
📄 dmraid.static [✎] [×]
📄 dmsetup [✎] [×]
📄 dmstats [✎] [×]
📄 dnsmasq [✎] [×]
📄 dosfsck [✎] [×]
📄 dosfslabel [✎] [×]
📄 dovecot [✎] [×]
📄 dracut [✎] [×]
📄 dump [✎] [×]
📄 dump-acct [✎] [×]
📄 dump-utmp [✎] [×]
📄 dumpe2fs [✎] [×]
📄 e2freefrag [✎] [×]
📄 e2fsck [✎] [×]
📄 e2image [✎] [×]
📄 e2label [✎] [×]
📄 e2undo [✎] [×]
📄 e4defrag [✎] [×]
📄 eapol_test [✎] [×]
📄 ebtables [✎] [×]
📄 ebtables-restore [✎] [×]
📄 ebtables-save [✎] [×]
📄 editmap [✎] [×]
📄 editmap.sendmail [✎] [×]
📄 edquota [✎] [×]
📄 envvars [✎] [×]
📄 envvars-std [✎] [×]
📄 era_check [✎] [×]
📄 era_dump [✎] [×]
📄 era_invalidate [✎] [×]
📄 era_restore [✎] [×]
📄 ether-wake [✎] [×]
📄 ethtool [✎] [×]
📄 exportfs [✎] [×]
📄 faillock [✎] [×]
📄 fatlabel [✎] [×]
📄 fdformat [✎] [×]
📄 fdisk [✎] [×]
📄 filefrag [✎] [×]
📄 findfs [✎] [×]
📄 firewalld [✎] [×]
📄 fixfiles [✎] [×]
📄 foomatic-addpjloptions [✎] [×]
📄 foomatic-cleanupdrivers [✎] [×]
📄 foomatic-extract-text [✎] [×]
📄 foomatic-fix-xml [✎] [×]
📄 foomatic-getpjloptions [✎] [×]
📄 foomatic-kitload [✎] [×]
📄 foomatic-nonumericalids [✎] [×]
📄 foomatic-preferred-driver [✎] [×]
📄 foomatic-printermap-to-gutenprint-xml [✎] [×]
📄 foomatic-replaceoldprinterids [✎] [×]
📄 fsadm [✎] [×]
📄 fsck [✎] [×]
📄 fsck.btrfs [✎] [×]
📄 fsck.cramfs [✎] [×]
📄 fsck.ext2 [✎] [×]
📄 fsck.ext3 [✎] [×]
📄 fsck.ext4 [✎] [×]
📄 fsck.fat [✎] [×]
📄 fsck.minix [✎] [×]
📄 fsck.msdos [✎] [×]
📄 fsck.vfat [✎] [×]
📄 fsck.xfs [✎] [×]
📄 fsfreeze [✎] [×]
📄 fstrim [✎] [×]
📄 ftpscrub [✎] [×]
📄 ftpshut [✎] [×]
📄 fuser [✎] [×]
📄 fxload [✎] [×]
📄 genhomedircon [✎] [×]
📄 genhostid [✎] [×]
📄 genl [✎] [×]
📄 genl-ctrl-list [✎] [×]
📄 getcap [✎] [×]
📄 getenforce [✎] [×]
📄 getpcaps [✎] [×]
📄 getsebool [✎] [×]
📄 glibc_post_upgrade.i686 [✎] [×]
📄 glibc_post_upgrade.x86_64 [✎] [×]
📄 gpm [✎] [×]
📄 groupadd [✎] [×]
📄 groupdel [✎] [×]
📄 groupmems [✎] [×]
📄 groupmod [✎] [×]
📄 grpck [✎] [×]
📄 grpconv [✎] [×]
📄 grpunconv [✎] [×]
📄 grub2-bios-setup [✎] [×]
📄 grub2-get-kernel-settings [✎] [×]
📄 grub2-install [✎] [×]
📄 grub2-macbless [✎] [×]
📄 grub2-mkconfig [✎] [×]
📄 grub2-ofpathname [✎] [×]
📄 grub2-probe [✎] [×]
📄 grub2-reboot [✎] [×]
📄 grub2-rpm-sort [✎] [×]
📄 grub2-set-default [✎] [×]
📄 grub2-setpassword [✎] [×]
📄 grub2-sparc64-setup [✎] [×]
📄 grubby [✎] [×]
📄 gss-server [✎] [×]
📄 gssproxy [✎] [×]
📄 halt [✎] [×]
📄 hardlink [✎] [×]
📄 hdparm [✎] [×]
📄 htcacheclean [✎] [×]
📄 htdbm [✎] [×]
📄 htdigest [✎] [×]
📄 htpasswd [✎] [×]
📄 httpd [✎] [×]
📄 httxt2dbm [✎] [×]
📄 hwclock [✎] [×]
📄 iconvconfig [✎] [×]
📄 iconvconfig.i686 [✎] [×]
📄 iconvconfig.x86_64 [✎] [×]
📄 ifcfg [✎] [×]
📄 ifconfig [✎] [×]
📄 ifdown [✎] [×]
📄 ifenslave [✎] [×]
📄 ifstat [✎] [×]
📄 ifup [✎] [×]
📄 in.proftpd [✎] [×]
📄 init [✎] [×]
📄 insmod [✎] [×]
📄 install-info [✎] [×]
📄 installkernel [✎] [×]
📄 intel-microcode2ucode [✎] [×]
📄 iotop [✎] [×]
📄 ip [✎] [×]
📄 ip6tables [✎] [×]
📄 ip6tables-restore [✎] [×]
📄 ip6tables-save [✎] [×]
📄 ipmaddr [✎] [×]
📄 ipmi-chassis [✎] [×]
📄 ipmi-chassis-config [✎] [×]
📄 ipmi-config [✎] [×]
📄 ipmi-console [✎] [×]
📄 ipmi-dcmi [✎] [×]
📄 ipmi-detect [✎] [×]
📄 ipmi-fru [✎] [×]
📄 ipmi-locate [✎] [×]
📄 ipmi-oem [✎] [×]
📄 ipmi-pef-config [✎] [×]
📄 ipmi-pet [✎] [×]
📄 ipmi-ping [✎] [×]
📄 ipmi-power [✎] [×]
📄 ipmi-raw [✎] [×]
📄 ipmi-sel [✎] [×]
📄 ipmi-sensors [✎] [×]
📄 ipmi-sensors-config [✎] [×]
📄 ipmiconsole [✎] [×]
📄 ipmidetect [✎] [×]
📄 ipmimonitoring [✎] [×]
📄 ipmiping [✎] [×]
📄 ipmipower [✎] [×]
📄 iprconfig [✎] [×]
📄 iprdbg [✎] [×]
📄 iprdump [✎] [×]
📄 iprinit [✎] [×]
📄 iprsos [✎] [×]
📄 iprupdate [✎] [×]
📄 ipset [✎] [×]
📄 iptables [✎] [×]
📄 iptables-restore [✎] [×]
📄 iptables-save [✎] [×]
📄 iptraf [✎] [×]
📄 iptraf-ng [✎] [×]
📄 iptstate [✎] [×]
📄 iptunnel [✎] [×]
📄 irqbalance [✎] [×]
📄 iw [✎] [×]
📄 kexec [✎] [×]
📄 key.dns_resolver [✎] [×]
📄 killall5 [✎] [×]
📄 kpartx [✎] [×]
📄 kpatch [✎] [×]
📄 ksplice-depmod [✎] [×]
📄 lchage [✎] [×]
📄 ldattach [✎] [×]
📄 ldconfig [✎] [×]
📄 ledctl [✎] [×]
📄 ledmon [✎] [×]
📄 lgroupadd [✎] [×]
📄 lgroupdel [✎] [×]
📄 lgroupmod [✎] [×]
📄 lid [✎] [×]
📄 lnewusers [✎] [×]
📄 lnstat [✎] [×]
📄 load_policy [✎] [×]
📄 lockdev [✎] [×]
📄 logresolve [✎] [×]
📄 logrotate [✎] [×]
📄 logsave [✎] [×]
📄 logwatch [✎] [×]
📄 losetup [✎] [×]
📄 lpadmin [✎] [×]
📄 lpasswd [✎] [×]
📄 lpc [✎] [×]
📄 lpc.cups [✎] [×]
📄 lpinfo [✎] [×]
📄 lpmove [✎] [×]
📄 lsmod [✎] [×]
📄 lsof [✎] [×]
📄 lspci [✎] [×]
📄 luseradd [✎] [×]
📄 luserdel [✎] [×]
📄 lusermod [✎] [×]
📄 lvchange [✎] [×]
📄 lvconvert [✎] [×]
📄 lvcreate [✎] [×]
📄 lvdisplay [✎] [×]
📄 lvextend [✎] [×]
📄 lvm [✎] [×]
📄 lvmconf [✎] [×]
📄 lvmconfig [✎] [×]
📄 lvmdiskscan [✎] [×]
📄 lvmdump [✎] [×]
📄 lvmetad [✎] [×]
📄 lvmpolld [✎] [×]
📄 lvmsadc [✎] [×]
📄 lvmsar [✎] [×]
📄 lvreduce [✎] [×]
📄 lvremove [✎] [×]
📄 lvrename [✎] [×]
📄 lvresize [✎] [×]
📄 lvs [✎] [×]
📄 lvscan [✎] [×]
📄 mailstats [✎] [×]
📄 makedumpfile [✎] [×]
📄 makemap [✎] [×]
📄 makemap.sendmail [✎] [×]
📄 matchpathcon [✎] [×]
📄 mcelog [✎] [×]
📄 mcstransd [✎] [×]
📄 mdadm [✎] [×]
📄 mdmon [✎] [×]
📄 mgetty [✎] [×]
📄 mii-diag [✎] [×]
📄 mii-tool [✎] [×]
📄 mkbootdisk [✎] [×]
📄 mkdict [✎] [×]
📄 mkdosfs [✎] [×]
📄 mkdumprd [✎] [×]
📄 mke2fs [✎] [×]
📄 mkfs [✎] [×]
📄 mkfs.btrfs [✎] [×]
📄 mkfs.cramfs [✎] [×]
📄 mkfs.ext2 [✎] [×]
📄 mkfs.ext3 [✎] [×]
📄 mkfs.ext4 [✎] [×]
📄 mkfs.fat [✎] [×]
📄 mkfs.minix [✎] [×]
📄 mkfs.msdos [✎] [×]
📄 mkfs.vfat [✎] [×]
📄 mkfs.xfs [✎] [×]
📄 mkhomedir_helper [✎] [×]
📄 mklost+found [✎] [×]
📄 mksquashfs [✎] [×]
📄 mkswap [✎] [×]
📄 modinfo [✎] [×]
📄 modprobe [✎] [×]
📄 modprobe.ksplice [✎] [×]
📄 modprobe.ksplice-orig [✎] [×]
📄 mount.ecryptfs [✎] [×]
📄 mount.ecryptfs_private [✎] [×]
📄 mount.fuse [✎] [×]
📄 mount.nfs [✎] [×]
📄 mount.nfs4 [✎] [×]
📄 mountstats [✎] [×]
📄 mpathconf [✎] [×]
📄 mpathpersist [✎] [×]
📄 msshd [✎] [×]
📄 mtr [✎] [×]
📄 multipath [✎] [×]
📄 multipathd [✎] [×]
📄 mysqld [✎] [×]
📄 nameif [✎] [×]
📄 netreport [✎] [×]
📄 new-kernel-pkg [✎] [×]
📄 newusers [✎] [×]
📄 nfsdcltrack [✎] [×]
📄 nfsidmap [✎] [×]
📄 nfsiostat [✎] [×]
📄 nfsstat [✎] [×]
📄 nl-class-add [✎] [×]
📄 nl-class-delete [✎] [×]
📄 nl-class-list [✎] [×]
📄 nl-classid-lookup [✎] [×]
📄 nl-cls-add [✎] [×]
📄 nl-cls-delete [✎] [×]
📄 nl-cls-list [✎] [×]
📄 nl-link-list [✎] [×]
📄 nl-pktloc-lookup [✎] [×]
📄 nl-qdisc-add [✎] [×]
📄 nl-qdisc-delete [✎] [×]
📄 nl-qdisc-list [✎] [×]
📄 nologin [✎] [×]
📄 nscd [✎] [×]
📄 nstat [✎] [×]
📄 ntp-keygen [✎] [×]
📄 ntpd [✎] [×]
📄 ntpdate [✎] [×]
📄 ntpdc [✎] [×]
📄 ntpq [✎] [×]
📄 ntptime [✎] [×]
📄 ntsysv [✎] [×]
📄 oddjobd [✎] [×]
📄 osd_login [✎] [×]
📄 ownership [✎] [×]
📄 packer [✎] [×]
📄 pam_console_apply [✎] [×]
📄 pam_tally2 [✎] [×]
📄 pam_timestamp_check [✎] [×]
📄 paperconfig [✎] [×]
📄 parted [✎] [×]
📄 partprobe [✎] [×]
📄 partx [✎] [×]
📄 pcscd [✎] [×]
📄 pdata_tools [✎] [×]
📄 pef-config [✎] [×]
📄 pidof [✎] [×]
📄 ping6 [✎] [×]
📄 pivot_root [✎] [×]
📄 plipconfig [✎] [×]
📄 pluginviewer [✎] [×]
📄 plymouth-set-default-theme [✎] [×]
📄 plymouthd [✎] [×]
📄 pm-hibernate [✎] [×]
📄 pm-powersave [✎] [×]
📄 pm-suspend [✎] [×]
📄 pm-suspend-hybrid [✎] [×]
📄 pm-utils-bugreport-info.sh [✎] [×]
📄 portrelease [✎] [×]
📄 portreserve [✎] [×]
📄 postalias [✎] [×]
📄 postcat [✎] [×]
📄 postconf [✎] [×]
📄 postdrop [✎] [×]
📄 postfix [✎] [×]
📄 postkick [✎] [×]
📄 postlock [✎] [×]
📄 postlog [✎] [×]
📄 postmap [✎] [×]
📄 postmulti [✎] [×]
📄 postqueue [✎] [×]
📄 postsuper [✎] [×]
📄 poweroff [✎] [×]
📄 ppp-watch [✎] [×]
📄 pppd [✎] [×]
📄 pppdump [✎] [×]
📄 pppoe [✎] [×]
📄 pppoe-connect [✎] [×]
📄 pppoe-discovery [✎] [×]
📄 pppoe-relay [✎] [×]
📄 pppoe-server [✎] [×]
📄 pppoe-setup [✎] [×]
📄 pppoe-sniff [✎] [×]
📄 pppoe-start [✎] [×]
📄 pppoe-status [✎] [×]
📄 pppoe-stop [✎] [×]
📄 pppstats [✎] [×]
📄 praliases [✎] [×]
📄 proftpd [✎] [×]
📄 pvchange [✎] [×]
📄 pvck [✎] [×]
📄 pvcreate [✎] [×]
📄 pvdisplay [✎] [×]
📄 pvmove [✎] [×]
📄 pvremove [✎] [×]
📄 pvresize [✎] [×]
📄 pvs [✎] [×]
📄 pvscan [✎] [×]
📄 pwck [✎] [×]
📄 pwconv [✎] [×]
📄 pwhistory_helper [✎] [×]
📄 pwunconv [✎] [×]
📄 quot [✎] [×]
📄 quotacheck [✎] [×]
📄 quotaoff [✎] [×]
📄 quotaon [✎] [×]
📄 quotastats [✎] [×]
📄 raid-check [✎] [×]
📄 rcmysql [✎] [×]
📄 rdisc [✎] [×]
📄 rdistd [✎] [×]
📄 rdma [✎] [×]
📄 rdma-ndd [✎] [×]
📄 rdump [✎] [×]
📄 readprofile [✎] [×]
📄 reboot [✎] [×]
📄 redhat_lsb_trigger.x86_64 [✎] [×]
📄 regdbdump [✎] [×]
📄 reject [✎] [×]
📄 repquota [✎] [×]
📄 request-key [✎] [×]
📄 resize2fs [✎] [×]
📄 resizepart [✎] [×]
📄 restore [✎] [×]
📄 restorecon [✎] [×]
📄 rfkill [✎] [×]
📄 rmcp-ping [✎] [×]
📄 rmcpping [✎] [×]
📄 rmmod [✎] [×]
📄 rmt [✎] [×]
📄 rngd [✎] [×]
📄 rotatelogs [✎] [×]
📄 route [✎] [×]
📄 routef [✎] [×]
📄 routel [✎] [×]
📄 rpc.gssd [✎] [×]
📄 rpc.idmapd [✎] [×]
📄 rpc.mountd [✎] [×]
📄 rpc.nfsd [✎] [×]
📄 rpc.rquotad [✎] [×]
📄 rpc.statd [✎] [×]
📄 rpcbind [✎] [×]
📄 rpcdebug [✎] [×]
📄 rpcinfo [✎] [×]
📄 rrestore [✎] [×]
📄 rsyslogd [✎] [×]
📄 rtacct [✎] [×]
📄 rtcwake [✎] [×]
📄 rtmon [✎] [×]
📄 rtpr [✎] [×]
📄 rtstat [✎] [×]
📄 runlevel [✎] [×]
📄 runuser [✎] [×]
📄 rvnamed-ng [✎] [×]
📄 sa [✎] [×]
📄 safe_finger [✎] [×]
📄 sasl2-shared-mechlist [✎] [×]
📄 saslauthd [✎] [×]
📄 sasldblistusers2 [✎] [×]
📄 saslpasswd2 [✎] [×]
📄 seaudit [✎] [×]
📄 sefcontext_compile [✎] [×]
📄 selabel_digest [✎] [×]
📄 selabel_lookup [✎] [×]
📄 selabel_lookup_best_match [✎] [×]
📄 selabel_partial_match [✎] [×]
📄 selinux_restorecon [✎] [×]
📄 selinuxconlist [✎] [×]
📄 selinuxdefcon [✎] [×]
📄 selinuxenabled [✎] [×]
📄 selinuxexeccon [✎] [×]
📄 semanage [✎] [×]
📄 semodule [✎] [×]
📄 sendmail [✎] [×]
📄 sendmail.postfix [✎] [×]
📄 sendmail.sendmail [✎] [×]
📄 service [✎] [×]
📄 sestatus [✎] [×]
📄 setcap [✎] [×]
📄 setenforce [✎] [×]
📄 setfiles [✎] [×]
📄 setpci [✎] [×]
📄 setquota [✎] [×]
📄 setregdomain [✎] [×]
📄 setsebool [✎] [×]
📄 setup [✎] [×]
📄 sfdisk [✎] [×]
📄 sgpio [✎] [×]
📄 showmount [✎] [×]
📄 shutdown [✎] [×]
📄 sim_server [✎] [×]
📄 slattach [✎] [×]
📄 sln [✎] [×]
📄 sm-notify [✎] [×]
📄 smartctl [✎] [×]
📄 smartd [✎] [×]
📄 smrsh [✎] [×]
📄 smtp-sink [✎] [×]
📄 smtp-source [✎] [×]
📄 sosreport [✎] [×]
📄 ss [✎] [×]
📄 sshd [✎] [×]
📄 sshd-keygen [✎] [×]
📄 start-statd [✎] [×]
📄 sulogin [✎] [×]
📄 sushell [✎] [×]
📄 swaplabel [✎] [×]
📄 swapoff [✎] [×]
📄 swapon [✎] [×]
📄 switch_root [✎] [×]
📄 sys-unconfig [✎] [×]
📄 sysctl [✎] [×]
📄 tc [✎] [×]
📄 tcpd [✎] [×]
📄 tcpdmatch [✎] [×]
📄 tcpdump [✎] [×]
📄 tcpslice [✎] [×]
📄 tcsd [✎] [×]
📄 telinit [✎] [×]
📄 testsaslauthd [✎] [×]
📄 thin_check [✎] [×]
📄 thin_delta [✎] [×]
📄 thin_dump [✎] [×]
📄 thin_ls [✎] [×]
📄 thin_metadata_size [✎] [×]
📄 thin_repair [✎] [×]
📄 thin_restore [✎] [×]
📄 thin_rmap [✎] [×]
📄 thin_trim [✎] [×]
📄 tickadj [✎] [×]
📄 tracepath [✎] [×]
📄 tracepath6 [✎] [×]
📄 try-from [✎] [×]
📄 tune2fs [✎] [×]
📄 tuned [✎] [×]
📄 tuned-adm [✎] [×]
📄 udevadm [✎] [×]
📄 umount.ecryptfs [✎] [×]
📄 umount.ecryptfs_private [✎] [×]
📄 umount.nfs [✎] [×]
📄 umount.nfs4 [✎] [×]
📄 unix_chkpwd [✎] [×]
📄 unix_update [✎] [×]
📄 unsquashfs [✎] [×]
📄 update-alternatives [✎] [×]
📄 update-pciids [✎] [×]
📄 update-smart-drivedb [✎] [×]
📄 uptrack-install [✎] [×]
📄 uptrack-remove [✎] [×]
📄 uptrack-show [✎] [×]
📄 uptrack-upgrade [✎] [×]
📄 usb_modeswitch [✎] [×]
📄 usb_modeswitch_dispatcher [✎] [×]
📄 useradd [✎] [×]
📄 userdel [✎] [×]
📄 userhelper [✎] [×]
📄 usermod [✎] [×]
📄 usernetctl [✎] [×]
📄 uuserver [✎] [×]
📄 vgcfgbackup [✎] [×]
📄 vgcfgrestore [✎] [×]
📄 vgchange [✎] [×]
📄 vgck [✎] [×]
📄 vgconvert [✎] [×]
📄 vgcreate [✎] [×]
📄 vgdisplay [✎] [×]
📄 vgexport [✎] [×]
📄 vgextend [✎] [×]
📄 vgimport [✎] [×]
📄 vgimportclone [✎] [×]
📄 vgmerge [✎] [×]
📄 vgmknodes [✎] [×]
📄 vgreduce [✎] [×]
📄 vgremove [✎] [×]
📄 vgrename [✎] [×]
📄 vgs [✎] [×]
📄 vgscan [✎] [×]
📄 vgsplit [✎] [×]
📄 vigr [✎] [×]
📄 vipw [✎] [×]
📄 virt-what [✎] [×]
📄 visudo [✎] [×]
📄 vmcore-dmesg [✎] [×]
📄 vpddecode [✎] [×]
📄 weak-modules [✎] [×]
📄 wipefs [✎] [×]
📄 wpa_cli [✎] [×]
📄 wpa_passphrase [✎] [×]
📄 wpa_supplicant [✎] [×]
📄 xfs_admin [✎] [×]
📄 xfs_bmap [✎] [×]
📄 xfs_copy [✎] [×]
📄 xfs_db [✎] [×]
📄 xfs_estimate [✎] [×]
📄 xfs_freeze [✎] [×]
📄 xfs_fsr [✎] [×]
📄 xfs_growfs [✎] [×]
📄 xfs_info [✎] [×]
📄 xfs_io [✎] [×]
📄 xfs_logprint [✎] [×]
📄 xfs_mdrestore [✎] [×]
📄 xfs_metadump [✎] [×]
📄 xfs_mkfile [✎] [×]
📄 xfs_ncheck [✎] [×]
📄 xfs_quota [✎] [×]
📄 xfs_repair [✎] [×]
📄 xfs_rtcp [✎] [×]
📄 xfsdump [✎] [×]
📄 xfsinvutil [✎] [×]
📄 xfsrestore [✎] [×]
📄 xqmstats [✎] [×]
📄 xtables-multi [✎] [×]
📄 ypbind [✎] [×]
📄 yppoll [✎] [×]
📄 ypset [✎] [×]
📄 yptest [✎] [×]
📄 yum-complete-transaction [✎] [×]
📄 yumdb [✎] [×]
📄 zdump [✎] [×]
📄 zic [✎] [×]
📄 zramctl [✎] [×]