From 26525b0f1e8be680d4d075b7bfa14e90db062ede Mon Sep 17 00:00:00 2001 From: Petr Lautrbach Date: Apr 19 2017 13:43:47 +0000 Subject: Revert "Enable expand-check in semanage.conf" There are several update issues which need to be soled first before we enable this in a stable release. For more information see https://bugzilla.redhat.com/show_bug.cgi?id=1319652#c25 This reverts commit e2707be9e12b09eae4e9835c539a19e2e6727533. --- diff --git a/semanage.conf b/semanage.conf index 1dce37b..fab2547 100644 --- a/semanage.conf +++ b/semanage.conf @@ -39,7 +39,7 @@ module-store = direct # expand-check check neverallow rules when executing all semanage # commands. There might be a penalty in execution time if this # option is enabled. -expand-check = 1 +expand-check=0 # usepasswd check tells semanage to scan all pass word records for home directories # and setup the labeling correctly. If this is turned off, SELinux will label /home