Revert "Enable expand-check in semanage.conf"

There are several update issues which need to be soled first before we
enable this in a stable release.

For more information see
https://bugzilla.redhat.com/show_bug.cgi?id=1319652#c25

This reverts commit e2707be9e1.
This commit is contained in:
Petr Lautrbach 2016-08-01 08:40:02 +02:00
parent c5131cee74
commit 65dffc89f6
1 changed files with 3 additions and 4 deletions

View File

@ -36,10 +36,9 @@ module-store = direct
# version is necessary.
#policy-version = 19
# expand-check check neverallow rules when executing all semanage
# commands. There might be a penalty in execution time if this
# option is enabled.
expand-check = 1
# expand-check check neverallow rules when executing all semanage commands.
# Large penalty in time if you turn this on.
expand-check=0
# usepasswd check tells semanage to scan all pass word records for home directories
# and setup the labeling correctly. If this is turned off, SELinux will label /home