L_GETSEPOL(8)

💖 L_GETSEPOL 💖

okay bestie, so this is a page from the Lustre Configuration Utilities manual — that's the L_GETSEPOL(8) situation iykyk — and it's all about pulling your Lustre SELinux policy info. no cap, it's a lil one-page wonder and honestly? iconic. let's get into it 🫶

---

✨ NAME ✨

l_getsepol — Lustre SELinux policy info. that's the whole name. short, sweet, slays. 💅

---

🌸 SYNOPSIS 🌸

l_getsepol

that's it. no flags, no args, no drama. she just runs. ✨

---

🦋 DESCRIPTION 🦋

so here's the vibe: l_getsepol generates the Lustre SELinux policy info that you're gonna set as a reference on a nodemap using lctl-nodemap_set_sepol(8). bestie it's literally the reference-policy-maker. 🎀

the info string describing the SELinux policy has this syntax:

MODE:NAME:VERSION:HASH

and here's the breakdown, colon by colon:

• MODE — a single digit telling you if SELinux is in Permissive mode (0) or Enforcing mode (1). zero or one, that's the whole mood spectrum.
• NAME — the name of the SELinux policy. lowercase name, big identity energy.
• VERSION — the version of the SELinux policy. yes, policies get versions, we love a glow-up timeline.
• HASH — the computed hash of the binary representation of the policy, as exported in /etc/selinux/<name>/policy/policy.<version>. long hex string, main character behaviour, no notes. 🔥

💀 important: l_getsepol should be run on a client node known to enforce the right SELinux policy. run it somewhere random and you're getting someone else's policy tea, not yours. pick the right node bestie.

---

🌈 EXAMPLES 🌈

okay watch this:

# l_getsepol
SELinux status info: 1:mls:31:c79984bb42c0151cb0d8cc34a196a6ca95c2791190c403804efb3e9d81b6109c

see that 1 up front? that's Enforcing mode, she's locked in. then mls is the policy name, 31 is the version, and the rest is the hash — a whole bouquet of hex digits, so pretty. ✨

---

👑 AVAILABILITY 👑

l_getsepol is part of the lustre(7) filesystem package since release 2.13.0. so if you're on 2.13.0 or later, she's there for you, girl. 🎀

---

💜 SEE ALSO 💜

• lustre(7)
• lctl-nodemap-set-sepol(8)

go read those too, they're the friend group. 🫶

---

🌸 okay that's the page! this one came straight out of the Lustre manual, dated 2024-08-29. mwah, take care, run it on the right node, and stay Enforcing. 💖✨💅