Security & Permissions commands

auditpol /get→sudo auditctl -s Auditing Show audit status Displays Linux audit subsystem status. Distro equivalents Debian/Ubuntu sudo auditctl -s Fedora sudo auditctl -s Arch sudo auditctl -s Open full guide → auditpol /set→sudo auditctl -w /path -p wa -k KEY Auditing Add audit watch Creates an audit rule for file writes/attribute changes. Distro equivalents Debian/Ubuntu sudo auditctl -w /path -p wa -k KEY Fedora sudo auditctl -w /path -p wa -k KEY Arch sudo auditctl -w /path -p wa -k KEY Open full guide → getcap→getcap -r / 2>/dev/null Capabilities List file capabilities Shows Linux file capabilities. Distro equivalents Debian/Ubuntu getcap -r / 2>/dev/null Fedora getcap -r / 2>/dev/null Arch getcap -r / 2>/dev/null Open full guide → setcap→sudo setcap cap_net_bind_service=+ep /path/to/bin Capabilities Grant file capability Gives a binary a specific kernel capability. Distro equivalents Debian/Ubuntu sudo setcap cap_net_bind_service=+ep /path/to/bin Fedora sudo setcap cap_net_bind_service=+ep /path/to/bin Arch sudo setcap cap_net_bind_service=+ep /path/to/bin Open full guide → certmgr.msc→trust list Certificates List trusted certificates Lists trusted certificate anchors where p11-kit trust is used. Distro equivalents Debian/Ubuntu trust list Fedora trust list Arch trust list Open full guide → certutil -verify→openssl verify -CAfile ca.pem cert.pem Certificates Verify certificate Checks a certificate against a CA file. Distro equivalents Debian/Ubuntu openssl verify -CAfile ca.pem cert.pem Fedora openssl verify -CAfile ca.pem cert.pem Arch openssl verify -CAfile ca.pem cert.pem Open full guide → manage-bde→sudo cryptsetup luksOpen /dev/sdb1 secure Disk & Storage Manage encrypted volumes Creates, opens and closes LUKS-encrypted Linux block devices. Distro equivalents Debian/Ubuntu sudo cryptsetup luksOpen /dev/sdb1 secure Fedora sudo cryptsetup luksOpen /dev/sdb1 secure Arch sudo cryptsetup luksOpen /dev/sdb1 secure Open full guide → cipher /d→gpg -d file.gpg > file Encryption Decrypt file Decrypts a GPG-encrypted file. Distro equivalents Debian/Ubuntu gpg -d file.gpg > file Fedora gpg -d file.gpg > file Arch gpg -d file.gpg > file Open full guide → cipher /e→gpg -c file Encryption Encrypt file symmetrically Encrypts a file with a passphrase using GnuPG. Distro equivalents Debian/Ubuntu gpg -c file Fedora gpg -c file Arch gpg -c file Open full guide → manage-bde -lock→sudo cryptsetup close mapper_name Encryption Lock encrypted volume Closes a LUKS encrypted mapping. Distro equivalents Debian/Ubuntu sudo cryptsetup close mapper_name Fedora sudo cryptsetup close mapper_name Arch sudo cryptsetup close mapper_name Open full guide → manage-bde -status→sudo cryptsetup status mapper_name Encryption Check encrypted volume Shows status for a LUKS mapping. Distro equivalents Debian/Ubuntu sudo cryptsetup status mapper_name Fedora sudo cryptsetup status mapper_name Arch sudo cryptsetup status mapper_name Open full guide → manage-bde -unlock→sudo cryptsetup open /dev/sdXn mapper_name Encryption Unlock encrypted volume Opens a LUKS encrypted block device. Distro equivalents Debian/Ubuntu sudo cryptsetup open /dev/sdXn mapper_name Fedora sudo cryptsetup open /dev/sdXn mapper_name Arch sudo cryptsetup open /dev/sdXn mapper_name Open full guide → attrib→chmod / chown File System Change file permissions/attributes Controls who can read, write, or execute a file. Linux uses a more powerful permission model than Windows. Distro equivalents Debian/Ubuntu chmod / chown Fedora chmod / chown Arch chmod / chown Open full guide → cacls / icacls→getfacl / setfacl File System Advanced file access control lists (ACL) Views and sets fine-grained file permissions beyond the basic owner/group/other model. Distro equivalents Debian/Ubuntu getfacl / setfacl Fedora getfacl / setfacl Arch getfacl / setfacl Open full guide → takeown→sudo chown user:group path File System Change file ownership Changes the user or group that owns a file or directory. Distro equivalents Debian/Ubuntu sudo chown user:group path Fedora sudo chown user:group path Arch sudo chown user:group path Open full guide → verify / certutil -hashfile→sha256sum File System Verify file integrity with checksums Generates or checks checksums to verify that files have not been corrupted or tampered with. Distro equivalents Debian/Ubuntu sha256sum Fedora sha256sum Arch sha256sum Open full guide → netsh advfirewall firewall add rule→sudo ufw allow 22/tcp Firewall Add firewall allow rule Allows inbound traffic to a port. Distro equivalents Debian/Ubuntu sudo ufw allow 22/tcp Fedora sudo firewall-cmd --add-service=ssh --permanent && sudo firewall-cmd --reload Arch sudo ufw allow 22/tcp Open full guide → netsh advfirewall set allprofiles state off→sudo ufw disable Firewall Disable firewall Disables the firewall frontend. Distro equivalents Debian/Ubuntu sudo ufw disable Fedora sudo systemctl disable --now firewalld Arch sudo ufw disable Open full guide → netsh advfirewall show allprofiles→sudo ufw status verbose Firewall Show firewall status Displays firewall state and active rules. Distro equivalents Debian/Ubuntu sudo ufw status verbose Fedora sudo firewall-cmd --list-all Arch sudo nft list ruleset Open full guide → wf.msc→gufw Firewall Open graphical firewall Opens a graphical firewall frontend when installed. Distro equivalents Debian/Ubuntu gufw Fedora firewall-config Arch gufw Open full guide → whoami /all→id && sudo -l Identity Show identity and privileges Shows user/group IDs and sudo privileges. Distro equivalents Debian/Ubuntu id && sudo -l Fedora id && sudo -l Arch id && sudo -l Open full guide → whoami /groups→id Identity Show group memberships Shows current user and group IDs. Distro equivalents Debian/Ubuntu id Fedora id Arch id Open full guide → whoami /priv→sudo -l Identity Show elevated privileges Lists allowed sudo commands for the current user. Distro equivalents Debian/Ubuntu sudo -l Fedora sudo -l Arch sudo -l Open full guide → whoami /user→id -un Identity Show current username Prints the current user name. Distro equivalents Debian/Ubuntu id -un Fedora id -un Arch id -un Open full guide → Get-AuthenticodeSignature→gpg --verify file.sig file Integrity Verify file signature Verifies a detached GPG signature. Distro equivalents Debian/Ubuntu gpg --verify file.sig file Fedora gpg --verify file.sig file Arch gpg --verify file.sig file Open full guide → sigcheck→debsums -s Integrity Verify installed package files Checks installed files against package checksums. Distro equivalents Debian/Ubuntu debsums -s Fedora sudo rpm -Va Arch sudo pacman -Qkk Open full guide → netsh advfirewall (firewall rules)→ufw Networking Manage firewall rules Controls which network traffic is allowed through the system's firewall. Distro equivalents Debian/Ubuntu sudo ufw allow 22/tcp Fedora sudo firewall-cmd --add-service=ssh --permanent && sudo firewall-cmd --reload Arch sudo ufw allow 22/tcp Open full guide → chgrp→sudo chgrp group file Permissions Change file group Changes group ownership. Distro equivalents Debian/Ubuntu sudo chgrp group file Fedora sudo chgrp group file Arch sudo chgrp group file Open full guide → chmod numeric mode→chmod 755 file Permissions Set numeric permissions Sets Unix permissions using octal mode. Distro equivalents Debian/Ubuntu chmod 755 file Fedora chmod 755 file Arch chmod 755 file Open full guide → chmod symbolic mode→chmod u+x script.sh Permissions Set symbolic permissions Adds or removes permission bits symbolically. Distro equivalents Debian/Ubuntu chmod u+x script.sh Fedora chmod u+x script.sh Arch chmod u+x script.sh Open full guide → umask→umask 027 Permissions Set default permissions mask Controls default permissions for newly created files. Distro equivalents Debian/Ubuntu umask 027 Fedora umask 027 Arch umask 027 Open full guide → secpol.msc password policy→chage -l username Policy Inspect password aging Shows password-aging settings for a user. Distro equivalents Debian/Ubuntu chage -l username Fedora chage -l username Arch chage -l username Open full guide → visudo→sudo visudo Privilege Safely edit sudoers Edits sudo policy with syntax checking. Distro equivalents Debian/Ubuntu sudo visudo Fedora sudo visudo Arch sudo visudo Open full guide → ssh-add on Windows→ssh-add ~/.ssh/id_ed25519 SSH Keys Load SSH key into agent Adds a private key to the SSH authentication agent. Distro equivalents Debian/Ubuntu ssh-add ~/.ssh/id_ed25519 Fedora ssh-add ~/.ssh/id_ed25519 Arch ssh-add ~/.ssh/id_ed25519 Open full guide → ssh-keygen on Windows→ssh-keygen -t ed25519 -C "you@example.com" SSH Keys Create SSH key Generates an Ed25519 SSH key pair. Distro equivalents Debian/Ubuntu ssh-keygen -t ed25519 -C "you@example.com" Fedora ssh-keygen -t ed25519 -C "you@example.com" Arch ssh-keygen -t ed25519 -C "you@example.com" Open full guide → runas→sudo System Run command as administrator Executes a command with elevated privileges (as root/superuser). Distro equivalents Debian/Ubuntu sudo Fedora sudo Arch sudo Open full guide → net accounts /maxpwage→sudo chage -M DAYS username Users & Groups Set password maximum age Configures password aging for a local account. Distro equivalents Debian/Ubuntu sudo chage -M DAYS username Fedora sudo chage -M DAYS username Arch sudo chage -M DAYS username Open full guide → net localgroup→groupadd / groups Users & Groups Manage user groups Creates groups, adds users to groups, and lists group memberships. Distro equivalents Debian/Ubuntu groupadd / groups Fedora groupadd / groups Arch groupadd / groups Open full guide → net localgroup group /add→sudo groupadd group Users & Groups Create group Creates a local Unix group. Distro equivalents Debian/Ubuntu sudo groupadd group Fedora sudo groupadd group Arch sudo groupadd group Open full guide → net localgroup group user /delete→sudo gpasswd -d user group Users & Groups Remove user from group Deletes a user membership from a group. Distro equivalents Debian/Ubuntu sudo gpasswd -d user group Fedora sudo gpasswd -d user group Arch sudo gpasswd -d user group Open full guide → net session / query user→who / w / last Users & Groups See who is currently logged in Lists currently logged-in users, what they are doing, and recent login history. Distro equivalents Debian/Ubuntu who / w / last Fedora who / w / last Arch who / w / last Open full guide → net user→useradd / usermod Users & Groups Create and manage user accounts Adds new users, changes user properties, and manages user accounts on the system. Distro equivalents Debian/Ubuntu useradd / usermod Fedora useradd / usermod Arch useradd / usermod Open full guide → net user username /active:no→sudo usermod -L USER Users & Groups Lock a user account Locks password-based login for a local account without deleting the account or its files. Distro equivalents Debian/Ubuntu sudo usermod -L USER Fedora sudo usermod -L USER Arch sudo usermod -L USER Open full guide → net user username /active:yes→sudo usermod -U USER Users & Groups Unlock a user account Re-enables password authentication for a previously locked account. Distro equivalents Debian/Ubuntu sudo usermod -U USER Fedora sudo usermod -U USER Arch sudo usermod -U USER Open full guide → net user username /delete→sudo userdel -r username Users & Groups Delete user account Removes a local user and optionally their home directory. Distro equivalents Debian/Ubuntu sudo userdel -r username Fedora sudo userdel -r username Arch sudo userdel -r username Open full guide → net user username /expires→sudo chage -E YYYY-MM-DD username Users & Groups Set account expiry Sets an expiration date for a user account. Distro equivalents Debian/Ubuntu sudo chage -E YYYY-MM-DD username Fedora sudo chage -E YYYY-MM-DD username Arch sudo chage -E YYYY-MM-DD username Open full guide → net user username /passwordreq→passwd Users & Groups Change user passwords Sets or changes a user account password. Distro equivalents Debian/Ubuntu passwd Fedora passwd Arch passwd Open full guide → net user username password→sudo passwd username Users & Groups Change user password Sets or changes a local user password. Distro equivalents Debian/Ubuntu sudo passwd username Fedora sudo passwd username Arch sudo passwd username Open full guide → passwd -l→sudo passwd -l username Users & Groups Lock password login Locks a user password. Distro equivalents Debian/Ubuntu sudo passwd -l username Fedora sudo passwd -l username Arch sudo passwd -l username Open full guide → passwd -u→sudo passwd -u username Users & Groups Unlock password login Unlocks a user password. Distro equivalents Debian/Ubuntu sudo passwd -u username Fedora sudo passwd -u username Arch sudo passwd -u username Open full guide → runas /user→sudo -u USER command Users & Groups Run a command as another user Executes one command or opens a login shell using another user account. Distro equivalents Debian/Ubuntu sudo -u USER command Fedora sudo -u USER command Arch sudo -u USER command Open full guide →