[CentOS] selinux getsebool request
John Jasen
jjasen at realityfailure.orgTue Apr 12 17:10:20 UTC 2016
- Previous message: [CentOS] mount bind problem
- Next message: [CentOS] selinux getsebool request
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Out of faint curiosity, how do we push change requests upstream to RHEL? I'm using puppet to automate systems, including the application of SELinux policy. While setsebool -P is non-damaging to repeat, it is time consuming -- taking about 45 seconds per execution to process the existing policy and re-commit to disk. I'd like a simple ability to put an unless in the execution of setsebool, to key off whether its necessary -- to reduce a SELinux puppet run from 250 seconds to about 60. Unfortunately, in the current format, getsebool has defeated me. Would it be possible to have getsebool extended, so something like getsebool -b $variablename would return true or false as the exit code?
- Previous message: [CentOS] mount bind problem
- Next message: [CentOS] selinux getsebool request
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
More information about the CentOS mailing list