[DSE-Dev] Bug#740563: Bug#740563: policycoreutils: semodule -d/-e is ridiculously slow

Laurent Bigonville bigon at debian.org
Mon Mar 3 01:14:26 UTC 2014

Le Sun, 02 Mar 2014 17:09:39 -0500,
Zack Weinberg <zackw at panix.com> a écrit :

> Enabling or disabling any SELinux module with `semodule -e` / `-d`
> takes approximately one minute, which makes manual module selection an
> exercise in frustration.  It should take no more than a second or two.


On my machine here it takes around 15s.

Could you check in /etc/selinux/semanage.conf if it contains
a line with "expand-check=0"?

More information about the SELinux-devel mailing list