From Fedora Project Wiki

Revision as of 10:37, 16 March 2022 by Plautrba (talk | contribs) (Created page with "= SELinux Parallel Autorelabel <!-- The name of your change proposal --> = == Summary == <!-- A sentence or two summarizing what this change is and what it will do. This info...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

SELinux Parallel Autorelabel

Summary

Owner


Current status

  • Targeted release: [[Releases/<number> | Fedora Linux <number> ]]
  • Last updated: 2022-03-16
  • FESCo issue: <will be assigned by the Wrangler>
  • Tracker bug: <will be assigned by the Wrangler>
  • Release notes tracker: <will be assigned by the Wrangler>

Detailed Description

restorecon and fixfiles support '-T nthreads' so lets make it default.

Feedback

Benefit to Fedora

Faster reboot after switch back to SELinux enabled system

Scope

  • Proposal owners:
    • Update selinux-*.service to drop '-T nthread' into /.autorelabel


  • Other developers:
  • Policies and guidelines: N/A (not needed for this Change)
  • Trademark approval: N/A (not needed for this Change)
  • Alignment with Objectives:

Upgrade/compatibility impact

How To Test

1. boot with SELinux disabled - add selinux=0 to kernel command line 2. check /.autorebale 3. compare times for reboot after 1.,2. and if you put '-T 1' into /.autorelabel


User Experience

Systems should be sooner available for work after autorelabel

Dependencies

Contingency Plan

  • Contingency mechanism: (What to do? Who will do it?) N/A (not a System Wide Change)
  • Contingency deadline: N/A (not a System Wide Change)
  • Blocks release? N/A (not a System Wide Change), Yes/No


Documentation

N/A (not a System Wide Change)

Release Notes