IPMCTL-SHOW-CAP(1)

✨ NAME ✨

ipmctl-show-cap — shows the current Command Access Policy restrictions 💅

(yeah bestie, it's the ipmctl manual, page ipmctl-show-cap(1), and it's giving ✨access control✨)

---

📜 SYNOPSIS 📜

ipmctl show [OPTIONS] -cap [TARGETS]

---

💖 DESCRIPTION 💖

Okay so picture this: your system has a whole Command Access Policy situation going on, and this command shows you the current restrictions. No cap.

What you get back is a lil list of Opcode:SubOpcode pairs plus the corresponding mailboxes that those commands are restricted to — if they're restricted at all, that is.

Each command can be restricted to one of these:

• None
• BIOS only
• SMBus only
• BIOS and SMBus only

And heads up: None means that Host, BIOS, and SMBus mailbox access is all allowed. Everybody's invited to the party 🎉

---

🎀 OPTIONS 🎀

• -h, -help — shows you help for this command. the way that it just... helps 🫶
• -ddrt — use this to specify DDRT as the desired transport protocol for the current invocation of ipmctl.
• -smbus — use this to specify SMBUS as the desired transport protocol for the current invocation of ipmctl.

⚠️ Note: the -ddrt and -smbus options are mutually exclusive and may not be used together. pick a lane bestie, you literally cannot have both 😭

• -o (text|nvmxml), -output (text|nvmxml) — changes the output format. one of: "text" (that's the default, btw) or "nvmxml". choose your fighter ✨

---

🎯 TARGETS 🎯

• -dimm [DimmIDs] — restricts output to specific PMem modules by supplying one or more comma separated PMem module identifiers. the default is to display all manageable PMem modules. iconic behaviour, honestly 👑

---

🌸 EXAMPLES 🌸

Lists restrictions for all PMem modules installed in the system:

ipmctl show -cap

Lists restrictions for PMem module 0x1001:

ipmctl show -dimm 0x1001 -cap

---

💀 LIMITATIONS 💀

In order to successfully execute this command:

• The caller must have the appropriate privileges. (yes, you need the right perms, sorry bestie 🙈)
• The specified PMem modules must be manageable by the host software.

---

🌈 RETURN DATA 🌈

The default behavior is to return a table which indicates the restrictions enforced by Command Access Policy (CAP).

• DimmID — the default display of PMem module identifiers. One of:
  • UID: use the DimmUID attribute as defined in the command [Show Dimm].
  • HANDLE: use the DimmHandle attribute as defined in the command [Show Dimm]. This is the default.
• Opcode — the Opcode for a command.
• SubOpcode — the SubOpcode for a command.
• Restriction — text describing which mailboxes are restricted for the Opcode:SubOpcode combination. One of:
  • None
  • BIOS only
  • SMBus only
  • BIOS and SMBus only
  • Management only
  • Management and BIOS only
  • Management and SMBus only
  • Management, BIOS and SMBus only
  • Unsupported

---

and that's the whole page, bestie 🦋 you ate that fr fr. this masterpiece is brought to you by the ipmctl crew, dated 2024-04-22 — go forth and check those Command Access Policy restrictions, periodt 💅✨