[LU-20046] Implementing lctl get_param/set_param sptlrpc.send_sepol

• Type: Improvement
• Resolution: Unresolved
• Priority: Minor
• Environment: Lustre 2.17.0-
• Severity: 1
• Assignee: Hiroshi Nishida
• Reporter: Hiroshi Nishida

Description

The send_sepol kernel module parameter for ptlrpc controls whether clients send their SELinux status to the servers:

Value	Behavior
0	Never send SELinux status
-1	Always send SELinux status
N > 0	Send SELinux status, cache for N seconds

To veify or set its value, users need to do:

# Check the current value
cat /sys/module/ptlrpc/parameters/send_sepol

# Set at runtime (always send)
echo -1 | sudo tee /sys/module/ptlrpc/parameters/send_sepol

# Set persistently across reboots
echo "options ptlrpc send_sepol=-1" | sudo tee -a /etc/modprobe.d/lustre.conf

lctl get_param sptlrpc.send_sepol # Run on client
lctl set_param [-P] sptlrpc.send_sepol=N # Run on MGS if -P is specified

simplify those procedures.