L_GETSEPOL(8)

NAME
l_getsepol - Lustre SELinux policy info

SYNOPSIS
l_getsepol

DESCRIPTION
l_getsepol generates the Lustre SELinux policy info to set as reference on a nodemap with lctl-nodemap_set_sepol(8). The info string describing the SELinux policy has the following syntax:
    MODE:NAME:VERSION:HASH
where:

MODE
    is a digit telling if SELinux is in Permissive mode (0) or Enforcing mode (1)

NAME
    is the name of the SELinux policy

VERSION
    is the version of the SELinux policy

HASH
    is the computed hash of the binary representation of the policy, as exported in /etc/selinux/<name>/policy/policy.<version>

l_getsepol should be run on a client node known to enforce the right SELinux policy.

EXAMPLES
    # l_getsepol
    SELinux status info: 1:mls:31:c79984bb42c0151cb0d8cc34a196a6ca95c2791190c403804efb3e9d81b6109c

AVAILABILITY
l_getsepol is part of the lustre(7) filesystem package since release 2.13.0

SEE ALSO
lustre(7), lctl-nodemap-set-sepol(8)