.TH "FAPOLICYD-CLI" "8" "Dec 2021" "Red Hat" "System Administration Utilities"
.SH NAME
fapolicyd-cli \- Fapolicyd CLI Tool
.SH SYNOPSIS
\fBfapolicyd-cli\fP [\fIoptions\fP]
.SH DESCRIPTION
The fapolicyd command line utility is a tool to tell the daemon that it needs to update the trust database. Normally, the daemon learns that the trust database needs updating because it uses a dnf plugin to inform it. However, you may install an rpm by hand and it can't see that a system package was installed or updated. Or perhaps the admin updates the fapolicyd.trust file and would like the changes to take effect immediately. In either of these cases, you would need to tell the daemon that it needs to do an update by running this command.
.SH OPTIONS
.TP
.B \-h, \-\-help
Prints a list of command line options.
.TP
.B \-\-check-config
Opens fapolicyd.conf and parses it to see if there are any syntax errors in the file.
.TP
.B \-\-check-path
Check the PATH environmental variable against the trustdb to look for file not in the trustdb which could cause problems at run time.
.TP
.B \-\-check-status
Dump the daemon's internal performance statistics.
.TP
.B \-\-check-trustdb
Check the trustdb against the files on disk to look for mismatches that will cause problems at run time.
.TP
.B \-\-check-watch_fs
Check the mounted file systems against the watch_fs daemon config entry to determine if any file systems need to be added to the configuration.
.TP
.B \-d, \-\-delete-db
Deletes the trust database. Normally this never needs to be done. But if for some reason the trust database becomes corrupted, then the only method of recovery is to run this command.
.TP
.B \-D, \-\-dump-db
Dumps the trust db contents for inspection. This will print the original trust source, path, file size, and SHA256 sum of the file as known by the trust source the entry came from.
.TP
.B \-f, \-\-file  add|delete|update [path]
Manage the file trust database.
.RS
.TP 12
.B add
This command adds the file given by path to the trust database. It gets the size and calculates the required SHA256 hash. If the path is a directory, it will walk the directory tree to the bottom and add every regular file that it finds. By default, the path is appended to the end of the \fBfapolicyd.trust\fP file.
.TP 12
.B delete
This command deletes all entries that match from the trust database. It will try to match multiple entries so that entire directories can be deleted in one command. To ensure that you only match a directory and not a partial name, be sure to end with '/'.
.TP 12
.B update
This command updates the size and hash of any matching paths in the file trust database. If no path is given, then all files are updated. If an argument is passed, then only matching paths get updated. If the intent is to match against a directory, ensure that it ends with '/'.
.RE
.TP
.B \-\-trust-file trust-file-name
Use after \fBfile\fP option. Makes every command of \fBfile\fP option operate on a single trust file named \fBtrust-file-name\fP that is located inside trust.d directory. If a trust file with such a name does not exist inside trust.d directory, it is created.
.TP
.B \-t, \-\-ftype /path/to/file
Prints the mime type of the file given. A full path must be specified. This command is intended to help get the ftype parameter of rules correct by seeing how fapolicyd will classify it. Fapolicyd may differ from the \fBfile\fP command.
.TP
.B \-l, \-\-list
Prints a listing of the fapolicyd rules file with a rule number to aid in troubleshooting or understanding of the debug messages.
.TP
.B \-u, \-\-update
Notifies fapolicyd to perform an update of the trust database.
.SH "SEE ALSO"
.BR fapolicyd (8),
.BR fapolicyd.rules (5),
.BR fapolicyd.trust (5),
and
.BR fapolicyd.conf (5)

.SH AUTHOR
Zoltan Fridrich