selang Commands Reference

selang Reference Guide › selang Commands › selang Commands Reference

selang Commands Reference

The following table lists all selang commands alphabetically.

Note: Commands that operate in the same manner in all environments are documented only in the AC environment. However, some commands are valid in more than one environment but differ in the manner they operate in each environment. These commands are marked with an asterisk (*) in the Description column of the table below and are documented separately in each environment they are valid in.

Command	Short	Environments	Description
alias		AC and unix Note: For UNIX hosts only.	Lists or defines aliases for selang commands and properties.
authorize	auth	AC and nt	*Sets the authority a specific accessor has when accessing a specific resource.
authorize-	auth-	AC and nt	*Removes the authority previously given to a specific accessor when accessing a specific resource.
backuppmd		pmd	Backs up the data in the PMDB database to a specified directory.
check		AC	Checks whether a user has access privileges to a particular resource.
checklogin		AC	Determines a user's login privileges, whether a password check is needed, and whether a terminal access check is needed.
checkpwd		AC	Checks a user's new password, without changing it, to make sure it follows password rules.
chfile	cf	AC and native	*Changes the definition of a file record in the CA ControlMinder or native OS database.
chgrp	cg	AC and native	*Changes existing internal group settings in the CA ControlMinder or native OS database.
chres	cr	AC and nt	*Changes an existing resource record in the CA ControlMinder or native OS database.
chusr	cu	AC and native	*Changes an existing internal user in the CA ControlMinder or native OS database.
chxgrp	cxg	AC	Changes existing enterprise group settings in the CA ControlMinder database.
chxusr	cxu	AC	Changes existing enterprise user settings in the CA ControlMinder database.
createpmd		pmd	Creates a PMDB on a remote host.
deletepmd		pmd	Removes the PMDB's selang protection files, the contents of the PMDB directory, and the PMDB directory from the remote host.
deploy		AC	Executes deployment selang commands stored in a RULESET object for the particular POLICY.
deploy-		AC	Executes policy undeployment selang commands stored in a RULESET object for the particular POLICY.
editfile	ef	AC and native	*Adds or changes the definition of a file record in the CA ControlMinder or native OS database.
editgrp	eg	AC and native	*Adds a new group to, or changes existing group settings in, the CA ControlMinder or native OS database.
editres	er	AC and nt	*Adds a new resource record to, or changes an existing resource record in, the CA ControlMinder or native OS database.
editres config		config	Lists the configuration settings in the source you specify.
editusr	eu	AC and native	*Adds a new user to, or changes an existing user in, the CA ControlMinder or native OS database.
editxgrp	exg	AC	Adds a new enterprise group or changes existing enterprise group properties, in the CA ControlMinder database.
editxusr	exu	AC	Adds a new enterprise user or changes existing enterprise user properties, in the CA ControlMinder database.
end_transaction		AC	Completes the start_transaction command for Dual Control PMDB processes.
environment	env	all	Sets the security environment selang is operating on.
find	f	AC and native	Lists the classes in the environment or the records in a class.
findpmd		pmd	Lists all PMDBs on the computer.
find config		config	Lists sources of configuration settings (ini files or registry entries) you can manage on this host.
find file		native	Lists system files.
find xgroup		nt	Lists the names of enterprise groups in the current or trusted domains.
find xuser		nt	Lists the names of enterprise users in the current or trusted domains.
get dbexport		AC	Retrieves the rules that were exported from a CA ControlMinder or PMD database.
get devcalc		AC	Retrieves policy deviation calculation results.
help		all	Displays selang help.
history		all	Displays the commands issued previously in the session.
hosts		all	Shows or sets the host to which selang commands are sent.
join	j	AC and native	*Joins a user to a group.
join-	j-	AC and native	*Removes a user from a group.
joinx	jx	AC	Joins an enterprise user to a group
joinx-	jx-	AC	Removes an enterprise user from a group.
list		AC and native	An alias of the find command.
listpmd		pmd	Lists information about the PMDB and its subscribers, update file, and error log.
newfile	nf	AC	Adds the definition of a file record in the CA ControlMinder database.
newgrp	ng	AC and native	*Adds a new group to the CA ControlMinder or native OS database.
newres	nr	AC and nt	*Adds a new resource record to the CA ControlMinder or native OS database.
newusr	nu	AC and native	*Adds a new internal user to the CA ControlMinder or native OS database.
newxgrp	nxg	AC	Adds a new enterprise group to the CA ControlMinder database.
newxusr	nxu	AC	Adds a new enterprise user to the CA ControlMinder database.
pmd		pmd	Clears the Policy Model error log, updates the subscriber list, releases subscribers, starts and stops the Policy Model service, truncates the update file, and reloads the initialization files.
rename		AC	Renames an object in the database.
restorepmd		pmd	Restores a PMDB on a local host.
rmfile	rf	AC	Removes a file resource record from the CA ControlMinder database.
rmgrp	rg	AC and native	*Removes a group from the CA ControlMinder or native OS database.
rmres	rr	AC and nt	*Removes a resource record from the CA ControlMinder or native Windows database.
rmusr	ru	AC and native	*Removes a user from the CA ControlMinder or native OS database.
rmxgrp	rxg	AC	Removes an enterprise group from the CA ControlMinder database.
rmxusr	rxu	AC	Removes an enterprise user from CA ControlMinder
ruler		AC and native	Sets the properties that display when a show command is executed.
search		AC and native	An alias of the find command.
setoptions	so	AC and nt	*Sets or displays the global options that control the behavior of the database.
showfile	sf	AC and native	*Lists the properties of file records in the CA ControlMinder or native OS database.
showgrp	sg	AC and native	*Lists the properties of group records in the CA ControlMinder or native OS database.
showres	sr	AC and nt	*Lists the properties of records in the CA ControlMinder or native Windows database.
showres config		config	Lists the configuration settings in the source you specify.
showusr	su	AC and native	*Lists the properties of user records in the CA ControlMinder database or the native OS database.
showxusr	sxu	AC	Lists the properties of enterprise user records in CA ControlMinder.
source		all	Executes the commands in a specified file.
start dbexport		AC	Exports a CA ControlMinder or PMD database.
start devcalc		AC	Triggers a policy deviation calculation.
start_transaction		AC	Starts recording a file that contains an unprocessed transaction for Dual Control PMDB processes, with one or more commands.
subs		pmd	Adds a subscriber to a parent PMDB or subscribes a database to a parent PMDB.
subspmd		pmd	Changes the parent of the database in the host to which you are connected.
unalias		AC and unix	Removes aliases for selang commands and properties.
undeploy		AC	An alias of the deploy- command.
unsubs		pmd	Removes subscribers from the subscriber list of a PMDB.
xaudit		nt	Sets auditing criteria and begins logging access events.
xaudit-		nt	Removes auditing criteria and stops logging access events.

Note: The native environment conforms to the rules of either the Windows (nt) or UNIX environments, depending on the operating system of the host to which you are connected.

selang Commands in the AC Environment

This section contains a complete alphabetic reference to all the selang commands that operate on the CA ControlMinder database (commands in the AC environment).