The libseccomp library provides an easy to use, platform independent, interface to the Linux Kernel's syscall filtering mechanism. The libseccomp API is designed to abstract away the underlying BPF based syscall filter language and present a more conventional function-call based filtering interface that should be familiar to, and easily adopted by, application developers.

Control groups is Linux kernel method for process resource restriction, permission handling and more. This package provides userspace interface to this kernel feature.

OpenFabrics Interfaces (OFI) is a framework focused on exporting fabric communication services to applications. OFI is best described as a collection of libraries and applications used to export fabric services. The key components of OFI are: application interfaces, provider libraries, kernel services, daemons, and test applications.

Libfabric is a core component of OFI. It is the library that defines and exports the user-space API of OFI, and is typically the only software that applications deal with directly. It works in conjunction with provider libraries, which are often integrated directly into libfabric.

This package provides a renameat2 command that calls the Linux-specific renameat2 system call.

This package provides a library called libpfm4, which is used to develop monitoring tools exploiting the performance monitoring events such as those provided by the Performance Monitoring Unit (PMU) of modern processors.

Libpfm4 helps convert from an event name, expressed as a string, to the event encoding that is either the raw event as documented by the hardware vendor or the OS-specific encoding. In the latter case, the library is able to prepare the OS-specific data structures needed by the kernel to setup the event.

libpfm4 provides support for the perf_events interface, which was introduced in Linux 2.6.31.

libnetfilter_queue is a userspace library providing an API to packets that have been queued by the kernel packet filter. It is is part of a system that deprecates the old ip_queue/libipq mechanism.

This package provides boltd, a userspace daemon for Thunderbolt devices, and boltctl, a command-line utility for managing those devices.

The daemon boltd exposes devices via D-Bus to clients. It also stores a database of previously authorized devices and will, depending on the policy set for the individual devices, automatically authorize newly connected devices without user interaction.

The command-line utility boltctl manages Thunderbolt devices via boltd. It can list devices, monitor changes, and initiate authorization of devices.

The cpufrequtils suite contains utilities to retrieve CPU frequency information, and set the CPU frequency if supported, using the cpufreq capabilities of the Linux kernel.

nftables is the project that aims to replace the existing ip,ip6,arp,ebtables framework. Basically, this project provides a new packet filtering framework, a new userspace utility and also a compatibility layer for ip,ip6tables. nftables is built upon the building blocks of the Netfilter infrastructure such as the existing hooks, the connection tracking system, the userspace queueing component and the logging subsystem.

This package provides a FUSE-based file system that provides read and write access to exFAT devices.

Util-linux is a diverse collection of Linux kernel utilities. It provides dmesg and includes tools for working with file systems, block devices, UUIDs, TTYs, and many other tools.

GNU Linux-Libre is a free (as in freedom) variant of the Linux kernel. It has been modified to remove all non-free binary blobs.

Blktrace is a block layer IO tracing mechanism which provides detailed information about request queue operations to user space. It extracts event traces from the kernel (via the relaying through the debug file system).

Tmon is a tool to interact with the complex thermal subsystem of the kernel Linux. It helps visualize thermal relationships and real-time thermal data, tune and test cooling devices and sensors, and collect thermal data for further analysis.

As computers become smaller and more thermally constrained, more sensors are added and new cooling capabilities introduced. Thermal relationships can change dynamically. Their complexity grows exponentially among cooling devices, zones, sensors, and trip points.

Linux exposes this relationship through /sys/class/thermal with a matrix of symbolic links, trip point bindings, and device instances. To traverse it by hand is no trivial task: tmon aims to make it understandable.

inputattach dispatches input events from several device types and interfaces and translates so that the X server can use them.

A suite of tools for manipulating the metadata of the dm-thin, dm-cache and dm-era device-mapper targets.

This is a file system client based on the SSH File Transfer Protocol. Since most SSH servers already support this protocol it is very easy to set up: on the server side there's nothing to do; on the client side mounting the file system is as easy as logging into the server with an SSH client.

Libnfsidmap is a library holding multiple methods of mapping names to ids and visa versa, mainly for NFSv4. It provides an extensible array of mapping functions, currently consisting of two choices: the default nsswitch and the experimental umich_ldap.

Headers of the Linux-Libre kernel.

Libnftnl is a userspace library providing a low-level netlink programming interface to the in-kernel nf_tables subsystem. The library libnftnl has been previously known as libnftables. This library is currently used by nftables.

The Falco security libraries include libsinsp and libscap. libscap manages the data capture process, while libsinsp is a system inspection library that enriches events from libscap with machine state. libsinsp also performs events filtering with rule evaluation through its internal rule engine. These libraries are used by the sysdig command-line utility.

The mcelog daemon logs memory, I/O, CPU, and other hardware errors on x86 systems running the kernel Linux. It can also perform user-defined tasks, such as bringing bad pages off-line, when configurable error thresholds are exceeded.

iptables is the user-space command line program used to configure the Linux 2.4.x and later IPv4 packet filtering ruleset (firewall), including NAT (Network Address Translation).

This package also includes ip6tables, which is used to configure the IPv6 packet filter.

Both commands are targeted at system administrators.

GNU Linux-Libre is a free (as in freedom) variant of the Linux kernel. It has been modified to remove all non-free binary blobs.