From e82adfcbd00fecaf588ee8ddd3d5432a5d92a51d Mon Sep 17 00:00:00 2001 From: Sebastien Buisson Date: Tue, 5 Feb 2019 16:06:39 +0100 Subject: [PATCH 1/1] LU-930 doc: man page for l_getsepol Man page for l_getsepol. Test-Parameters: trivial Signed-off-by: Sebastien Buisson Change-Id: I338492cebca9a088657ff8bd5122274e7e49a5c7 Reviewed-on: https://review.whamcloud.com/34184 Reviewed-by: Andreas Dilger Tested-by: Jenkins Tested-by: Maloo Reviewed-by: Joseph Gmitter --- lustre/doc/l_getsepol.8 | 49 +++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 49 insertions(+) create mode 100644 lustre/doc/l_getsepol.8 diff --git a/lustre/doc/l_getsepol.8 b/lustre/doc/l_getsepol.8 new file mode 100644 index 0000000..40eb1f0 --- /dev/null +++ b/lustre/doc/l_getsepol.8 @@ -0,0 +1,49 @@ +.TH l_getsepol 8 "2019 Feb 5" Lustre "configuration utilities" +.SH NAME +l_getsepol \- Lustre SELinux policy info + +.SH SYNOPSIS +.br +.B l_getsepol +.br +.SH DESCRIPTION +.B l_getsepol +generates the Lustre SELinux policy info to set as reference on a nodemap with +.BR lctl +.BR nodemap_set_sepol (8). + +.br +The info string describing the SELinux policy has the following syntax: + +::: + +where: +.RS 4 +- is a digit telling if SELinux is in Permissive mode (0) or Enforcing +mode (1) + +- is the name of the SELinux policy + +- is the version of the SELinux policy + +- is the computed hash of the binary representation of the policy, as +exported in /etc/selinux//policy/policy. +.RE + +.B l_getsepol +should be run on a client node known to enforce the right SELinux policy. + +.SH EXAMPLES +.nf +# l_getsepol +SELinux status info: 1:mls:31:c79984bb42c0151cb0d8cc34a196a6ca95c2791190c403804efb3e9d81b6109c +.fi + +.SH AVAILABILITY +.B l_getsepol +is part of the +.BR Lustre (7) +filesystem package. +.SH SEE ALSO +.BR lustre (7), +.BR lctl-nodemap-set-sepol (8) -- 1.8.3.1