* Jason L. Tibbitts, III:

>>>>>> Neal Gompa <ngomp...@gmail.com> writes:
>
>> The problem is that policy modules can depend on each other, and since
>> policy modules can add things both to the global store and to the pool
>> of stuff other modules can use, it has to be processed serially.
>
> Even then, semodule itself takes a surprising amount of time to run.
> Whether it is faster or slower than the full restorecon run depends
> quite a bit on how much data the system has.  I do wonder if there's any
> way to make it even a little less glacial.

Yes, it seems quite malloc-heavy.  Switching from bzip2 to zstd could
help a bit, too.  In the past, regular expression compilation using PCRE
was a major bottleneck, but I didn't see that during the last updates.

Thanks,
Florian

-- 
_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to