On Fri, 2008-04-04 at 12:14 +0200, Harald Hoyer wrote:
> Harald Hoyer wrote:
> > Turning off selinux and related services saves 10s overall boot time.
> > Trading off security with boot time. I don't know. But maybe a good
> > starting point for optimization.
>
> Boot time:
> 35s without selinux and without auditd
> 40s with selinux + auditd + restorecond
> 45s with selinux + auditd + restorecond + setroubleshootd
>
> I can live without setroubleshootd..
Setroubleshootd should be made to start up on demand when an AVC is
generated or it should be split to two parts - a lightweight listener
for AVCs + heavy analyzer part which would be executed only on demand.
>From the boot charts it is clear that it is one of the most resource
hungry things in the boot sequence.
--
Tomas Mraz
No matter how far down the wrong road you've gone, turn back.
Turkish proverb
--
fedora-devel-list mailing list
fedora-devel-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-devel-list
