PowerScaleOneFS CLI Command Reference

Syntax

isi security check start
  [--exclude-list | -e (ClusterHealthCheck | PeriodicSecurityCheck | StigComplianceCheck)| {--name | -c} (ClusterHealthCheck | PeriodicSecurityCheck | StigComplianceCheck)]
  [--mode | -m (cluster | node)]
  [--node-lnn | -n} <integer>]
  [--action | -a} (celog | reboot | shutdown)]
  [{--help | -h}] 

Options

--exclude-list | -e <security-check-name> |

--name | -c <security-check-name>

By default, the command runs all security checks. Use one of these parameters to specify a subset of security checks to run.

• Use --exclude-list to exclude one of the checks from the run.
• Use --name to specify one check to run.

The available <security-check-name> values are:

• ClusterHealthCheck - Runs the OneFS Health Check Framework security checks.
• PeriodicSecurityCheck - Runs the FreeBSD periodic(8) security checks.
• StigComplianceCheck - Verifies that all STIG hardening configuration settings remain configured.

--mode | -m {cluster | node}

Selects whether to run the security check on the cluster or on specific nodes. The default is cluster.

--node-lnn | -n <integer> ...

Node number (LNN) on which to run the security check. Specify multiple nodes by repeating the --node-lnn parameter for each additional node.

--action | -a {celog | reboot | shutdown}

Action that OneFS should take when a security check discovers security anomalies. Available options are:

• celog - Send an event message to CELOG. The message contains the details of the security anomaly.
• reboot - Reboot the node experiencing the security anomaly.
• shutdown - Shut down the node experiencing the security anomaly.

--help | -h

Displays help for this command.