[LU-5560] SELinux support on the client side

• Type: Improvement
• Resolution: Fixed
• Priority: Minor
• Fix Version/s: Lustre 2.8.0, Lustre 2.9.0
• Labels: patch
• Assignee: Oleg Drokin
• Reporter: Sebastien Buisson (Inactive)

Description

The aim is to be able to enforce SELinux security policies on Lustre from SELinux-enabled clients.

It requires to properly initiate file security context on client side, and store it on server side via extended attribute.

Issue Links

• is blocked by: LU-6784 Defects in SELinux support
• is related to: LUDOC-335 Documentation for SELinux Feature
• is related to: LU-8654 obd_connect_data handling must account for clients that send obd_connect_data_v1
• is related to: LU-9193 Multiple hangs observed with many open/getattr
• is related to: LU-6950 Lustre mount throws away SELinux context options
• is related to: LU-7417 Permission Denied on enforcing SElinux on Client