Security Commands

MAD Firewall

nv show system security gpu-mad-firewall

	nv show system security gpu-mad-firewall Display MAD firewall state.
Syntax Description	N/A
Default	enabled
History	25.03.0227
Example	`admin@nvos:~$ nv show system security gpu-mad-firewall operational applied --------------------- --------------- ------------ state enabled enabled`
REST API	GET https://<ip>/nvue_v1/system/security/gpu-mad-firewall
Related Commands
Notes

nv set system security gpu-mad-firewall

	nv set system security gpu-mad-firewall state {state} Set MAD firewall state
Syntax Description	state	enabled \| disabled
Default	enabled
History	25.03.0227
Example	`admin@nvos:~$ nv set system security gpu-mad-firewall state disabled created [rev_id: 1] admin@nvos:~$ nv config apply`
REST API	PATCH https://<ip>/nvue_v1/system/security/gpu-mad-firewall/state
Related Commands
Notes

Integrity Measurement Architecture (IMA)

nv show system security ima

	nv show system security ima Show IMA boot policy mode (reboot required for state changes to take effect)
Syntax Description	N/A
Default	state: disabled
History	25.03.0724
Example	`admin@nvos:~$ nv show system security ima operational applied ----------- ------- state disabled enabled`
REST API	GET https://<ip>/nvue_v1/system/security/ima
Related Commands	nv set system security ima state nv action upload system security ima measurements
Notes	When operational and applied states differ, both columns are shown. A system reboot is required for the operational state to match the applied configuration.

nv set system security ima state

	nv set system security ima state Enable or disable full IMA policy enforcement at boot. Requires a system reboot to take effect
Syntax Description		IMA boot policy state: enabled or disabled
Default	disabled
History	25.03.0724
Example	`admin@nvos:~$ nv set system security ima state enabled admin@switch:~$ nv config apply Applied.`
REST API	PATCH https://<ip>/nvue_v1/system/security/ima {state: }
Related Commands	nv show system security ima nv unset system security ima
Notes	When enabled, additional IMA measurement rules are applied at boot (MMAP_CHECK, BPRM_CHECK, FIRMWARE_CHECK, KEXEC_INITRAMFS_CHECK, KEXEC_CMDLINE). A system reboot is required for the operational state to take effect.

nv unset system security ima

	nv unset system security ima Clear IMA configuration and revert to defaults
Syntax Description	N/A
Default	N/A
History	25.03.0724
Example	`admin@nvos:~$ nv unset system security ima`
REST API	DELETE https://<ip>/nvue_v1/system/security/ima
Related commands	nv show system security ima nv set system security ima state
Notes	Clears the applied IMA configuration. Operational state changes require a system reboot.

nv action upload system security ima measurements

	nv action upload system security ima measurements <TBD> Upload IMA runtime measurements from the kernel securityfs interface to a remote server
Syntax Description		Remote URL for upload (e.g. scp://user:pass@host/dir/)
Default	None
History	25.03.0724
Example	`admin@nvos:~$ nv action upload system security ima measurements scp://my_user:my_password@hostname/dir/ Action executing ... Action succeeded`
REST API	POST https://<ip>/nvue_v1/system/security/ima/measurements @upload {remote-url: }
Related commands	nv show system security ima
Notes	Exports the contents of `binary_runtime_measurements` from the kernel securityfs interface. Password prompt is supported for authenticated remote URLs.

Last updated: September 02, 2026