Happinux Command Line Tool
- Introduction of operation programs for Happinux -
1. Outline

5. Config cleaner

6. Network socket control tools.

7. setuid/gid control tools

8. switch user mode operation tools

9. Process control tools

10. Cracking prevention tools

11. System update tools

12. Admin password changing tools

13. Configure initialize tools

14. Log activate tool

15. Other tools

1. Outline
When you log in with admin authority. You can manage many tools to control system. This manual will tell you the usage and options for each command. Use man command to know more.

e.g.) man igniz_ls

[Pic 1: igniz_ls command man page]

Only security admin can use system management tools. But switch user mode program is allowed to all user ,so you have to be careful on setting

2. Admin log in tool : igniz_admin
You can change your authority to security admin from root by using igniz_admin command. It runs on switch user mode (this will be explained in chapter 8). When you run this program, it will ask you to input password. You can be security admin type in the password you set on admin password change tool.

[Pic 2: igniz_admin command execution 1]

options :
-P or -p :appoint a program path to run when password is correct.
-I or -i : divide whether it is upper system or lower system
-H or -h :print all options for Igniz_admin command (help)

[root@test bin]# ./igniz_admin -i It's not real root [root@test bin]#

when it is not upper system, you are not a security admin.

[Pic 3: igniz_admin command execution 2]

3. System bootiong tools : igniz_break
system boot tool is made to turn off or reboot the system in lower system. It changes your athority to upper system.

Options:
Options are defined by first number after command. each number has following property
1:Reboot 2: System turn off 3: Change to upper system

[焊扁 4: igniz_break command execution]

You should be careful to use those functions ,it can halt or reboot your system.

4. Admin permission operation tools
Admin permission operation tool is associated with access contol skill, which is core of secure OS. There are many benefits by importing umask system on Happinux.First of all, Happinux solves inconvenience in existing secure OS.In existing systems admin need to access many file and directory to change each file and directory permission. It is very troblesome work for admin. In sight of system performance, existing secure OS has data limit so that as the data gets bigger, system performance decreased. But Happinux keeps only essential configurations in data list accept default setup configuration, so possibility of error is very low. Also there is auto configuration so that you can easily construct a secure system. It is benefit that only Happinux supports.

(1) igniz_umask

igniz_umask is command that sets permission of root directory of lower system. Umask concept, core of Happinux is accomplished when you set permission of the root directory.

options :

igniz_umask [+ permission option flag ] [- permission option flag] [ root directory]

There are 'r' (read), 'w'(write), 'x'(execute), 'd'(delete) authorities and '+', '-' flags change the property of these authorities. for example, when you set '+rwx' , it means you give read, write and execute athority on the file. on the other hand, if you set '-rwx' . it means you remove these authorities from the file. These options does not care for capital letters and you can configure many directories by using '*'(wildcard)

[Pic 5: igniz_umask command execution]

(2) igniz_chmod

igniz_chmod is command for setting lower system directory and file permission configuration. Some files and directories, which is not correctly configured on default.igniz_chmod can embody a effective access control by changing permission of these files and directories

options :

igniz_chmod [+ permission option flag][-permission option flag][file path or directory path]

Options flags are seperated as 'read', 'write', 'execute', and 'delete'.This command can set all lower files and lower single directories.

[Pic 6: igniz_chmod command execution]

This command also can use '*'(wild card) charactor as a factor.

(3) igniz_ls

igniz_ls command is nearly same as existing 'ls' command, which show the file and directory list of the system. You can every appointed file and directory permissions by using igniz_ls.

[Pic 7: igniz_ls command execution]
in addition, in this picture all the file permissions are '+rwxd'. Because of this, you can see all the file permission in this directory is "RWXD".

5. configuration cleaning tool : igniz_clean

Happinux supports kernel memory arrangement program. You can make your system optimized by cleaning useless configurations and empty list memroies. igniz_clean command will do this job for you.

options:

igniz_clean[number]

1.Whole system configuration optimize.
2.Umask configuration optimize.
3.Directory configuration optimize.
4.File configuration optimize.
5.Process configuration optimize.
6.Setuid/gid configuration optimize.
7.Swich user mode configuration optimize.
8.Network socket configuration optimize.

You can manage your system in best condition. If you regularly execute this program.

6. Network socket manager program

Network socket manager program is to set allowance/denial of network socket use for each user. This program can prevent server to be abused as a by way , download malicious program by controling socket for each user.

(1) igniz_sock

igniz_sock is a command to set network socket permission for each user.

[Pic 8: igniz_sock command execution] Options: igniz_sock -option [user id]

-S or , -s option -Set permission at using socket() function, which does network connect. By cutting off this function, you can block illegal use of system as a by way.

-B or , -b option -Set permission at using bind() function, which opens port and make server to wait client connection. By cutting off this function, you can prevent network backdoor and port open.

-O or , -o option -Set permission at using setsockopt() function, which set socket options. By controlling this function, you can prevent user to change socket options .

(2) igniz_conf_sock igniz_conf_sock prints configuration for each user id. As following picture, you can see whether a user can use socket functions or not. In addition, [X] means denial.

(3) igniz_del_sock igniz_del_sock removes allowance of using socket by a user.

[Pic 9: igniz_del_sock command execution]

This command uses same options as igniz_sock. It works only when you apply same functions. It means you need to use options that you set when you execute igniz_sock command. In picture upon, there is execution example of iniz_del_sock.

(You can confirm -s, -b, -o options are set, by using igniz_conf_sock command You will see all socket permissions are gone after excute igniz_del_sock with -bso options)

7. setuid/gid control tools setuid/gid control tool has been developed to cut off local system valunerabilies. This program makes only permitted setuid/gid programs run on the system.

(1) igniz_suid igniz_suid command allows a setuid file with intergrity to be executed. Admin has to be careful with this program setting.