Your message dated Wed, 02 Oct 2013 22:18:45 +0000
with message-id <[email protected]>
and subject line Bug#724999: fixed in libsemanage 2.1.10-3
has caused the Debian Bug report #724999,
regarding libsemanage-common: Missing configuration parameters makes semodule 
calls really slow
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
724999: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=724999
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libsemanage-common
Version: 2.1.10-2
Severity: normal
Tags: patch

Hi,

This is a reminder bug.

On debian, any semodule operation is unbearably slow.

Dominick Grift has found that adding the following lines to
/etc/selinux/semanage.conf was fixing this.

# expand-check check neverallow rules when executing all semanage commands.
# Large penalty in time if you turn this on.
expand-check=0
 

Other parameter could also be used to optimize the speed in some operations:

# usepasswd check tells semanage to scan all pass word records for home 
directories
# and setup the labeling correctly.  If this is turned off, SELinux will label 
/home
# correctly only.  You will need to use semanage fcontext command.
# For example, if you had home dirs in /althome directory you would have to 
execute
# semanage fcontext -a -e /home /althome
usepasswd=False
bzip-small=true
bzip-blocksize=5

Cheers,

Laurent Bigonville

-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.10-3-amd64 (SMP w/8 CPU cores)
Locale: LANG=fr_BE.utf8, LC_CTYPE=fr_BE.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

-- no debconf information

--- End Message ---
--- Begin Message ---
Source: libsemanage
Source-Version: 2.1.10-3

We believe that the bug you reported is fixed in the latest version of
libsemanage, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Laurent Bigonville <[email protected]> (supplier of updated libsemanage package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Wed, 02 Oct 2013 21:25:16 +0200
Source: libsemanage
Binary: libsemanage-common libsemanage1 libsemanage1-dev ruby-semanage 
python-semanage
Architecture: source all amd64
Version: 2.1.10-3
Distribution: unstable
Urgency: low
Maintainer: Debian SELinux maintainers <[email protected]>
Changed-By: Laurent Bigonville <[email protected]>
Description: 
 libsemanage-common - Common files for SELinux policy management libraries
 libsemanage1 - SELinux policy management library
 libsemanage1-dev - Header files and libraries for SELinux policy manipulation
 python-semanage - Python bindings for SELinux policy management
 ruby-semanage - Ruby bindings to for SELinux policy management
Closes: 720220 724999
Changes: 
 libsemanage (2.1.10-3) unstable; urgency=low
 .
   * Team upload.
   * debian/patches/disable-expand-check.patch: Disable expand-check option by
     default to speedup semodule operations (Closes: #724999)
   * debian/control: Bump Standards-Version to 3.9.4 (no further changes)
   * debian/rules: Stop building binding for ruby 1.8 and start building it for
     ruby 2.0 (Closes: #720220)
   * debian/control, debian/rules: Drop libsemanage-ruby1.8 transitional
     package
   * debian/control: Use canonical URL for VCS-Git field
Checksums-Sha1: 
 cc22281b652f474ad0b2c46eb93b805d4d8ddd22 2092 libsemanage_2.1.10-3.dsc
 4d3768ea14cf304a4a4ec0aeefac665903698eec 17006 
libsemanage_2.1.10-3.debian.tar.gz
 49b1df4a21a79767e36287ddef4ae8c6c6b246d9 24056 
libsemanage-common_2.1.10-3_all.deb
 8ed2ff6e695ff477e891d01fb7d6affcaef48f97 86050 libsemanage1_2.1.10-3_amd64.deb
 99140b0781a8d425e60aa56163056648d9bbbe27 114886 
libsemanage1-dev_2.1.10-3_amd64.deb
 ac6f8f939e3333307176813e88a173a3b98699b7 64722 ruby-semanage_2.1.10-3_amd64.deb
 5bb311c1643af497ff2c3caf727732d9a866e50f 61328 
python-semanage_2.1.10-3_amd64.deb
Checksums-Sha256: 
 5080616c0899edf7619ad23af4e73bc9070823e0588f33cd60837474b29d1a7c 2092 
libsemanage_2.1.10-3.dsc
 bad39bdfe727fccfff69a7dd640a189edbc521fee2e65cb14cc2f27281d9d2c3 17006 
libsemanage_2.1.10-3.debian.tar.gz
 6ed4341e72edffec7d7d3a2d4be88abfa4f0ef621feb43bd76db7e73c6e3b412 24056 
libsemanage-common_2.1.10-3_all.deb
 449070e865b0299a414fb5b3cee5c0b2ed6e1abf9f12e111a53b864547a67c14 86050 
libsemanage1_2.1.10-3_amd64.deb
 c8d263c19dd58011243c2fe5c27a5cf949952d951053c2f9567f1e2f355a7147 114886 
libsemanage1-dev_2.1.10-3_amd64.deb
 d4b9e8abd1df697b2e000e8ade080cfbad590f71d6919c54e6f03fa8e02f2b71 64722 
ruby-semanage_2.1.10-3_amd64.deb
 2bbf20f5f44828d20524e89c03f2e6ab6cc2372e19c9678530ef55558eb09a94 61328 
python-semanage_2.1.10-3_amd64.deb
Files: 
 9f73a9608331584d5df4abe64e2e6249 2092 libdevel optional 
libsemanage_2.1.10-3.dsc
 b0ab2dfffef08d16a8aba229e4670503 17006 libdevel optional 
libsemanage_2.1.10-3.debian.tar.gz
 29fd0d8b8166f05c6a7cd675f98605b1 24056 libs optional 
libsemanage-common_2.1.10-3_all.deb
 69aca3e8d10262a3238ce368fb5ffde3 86050 libs optional 
libsemanage1_2.1.10-3_amd64.deb
 7af90d4a8fc2d17ee81cdec7edb7c2d6 114886 libdevel optional 
libsemanage1-dev_2.1.10-3_amd64.deb
 3255089ca503112ee745ecc9356d9de3 64722 ruby optional 
ruby-semanage_2.1.10-3_amd64.deb
 403e0376d7dc9cd37c1ccb03e13cf9be 61328 python optional 
python-semanage_2.1.10-3_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (GNU/Linux)

iQEcBAEBCAAGBQJSTJocAAoJEB/FiR66sEPViZUIAIf1MBUVDk7+LU8br+rY3oEg
ZGnfyTPmtc/AcE6IXjPWTl9gEX+1lCplB5uDRjw6puAuQeEH5G5XHh2R++YheMBh
rtVdHen88Jg0GedyNO0uvIl5bvsH95tAmO46DplJl4xeHmmO4xBJ1GN2Ndr/t9LS
Hqoa5X9hkVDZs1UndQ97Oyo3ncxQvTSuo/WNnculEt6yy35vaIXvqlJhCffOFCrK
3wWS4TDF5UefeYx8bq4cPrJz0U4lVe023L/+Q574BwHOxWTIGUdBVUVccQHXAtE4
2S0+bCP/Nhn30yU7mCygejpjt5dY37ak9yxLo1xXrL99Cnio0nKgbZWJcEr0Gg0=
=ISmm
-----END PGP SIGNATURE-----

--- End Message ---
_______________________________________________
SELinux-devel mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/selinux-devel

Reply via email to