On Wed, 2008-09-10 at 20:03 +1000, Russell Coker wrote: > Is there some good reason for rebuilding and loading the policy as part of the > process of running "semanage fcontext"? > > It makes the process take a long time and doesn't seem to serve any purpose. See the FIXME comment in libsemanage/src/direct_api.c, and Dan's patch and subsequent discussion: http://marc.info/?l=selinux&m=121874340121830&w=2 Unfortunately there remain some problems with the patch, as discussed there. -- Stephen Smalley National Security Agency -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.