Why setsebool command of SELINUX taking so long and slow?

by

I have noticed the command setsebool take longer time than other linux commands. Such as:

setsebool -P ftp_home_dir ON

Out of curiosity I want to know why “setsebool” command needs such a long time to complete the task?

Answer

The reason it is so slow is because it is performing a full compile of the policy when you run the command. (See this BZ: https://bugzilla.redhat.com/show_bug.cgi?id=811656, Dan Walsh is one of the maintainers of the SELinux policy on RHEL and Fedora). It has been fixed in later versions of Fedora, which means it’ll probably end up fixed in EL7 and possibly in later releases of EL6.

Attribution
Source : Link , Question Author : Xianlin , Answer Author : jsbillings

Leave a Comment