Bug 716335

Summary:	system-config-selinux should batch updates for reasonable performance
Product:	[Fedora] Fedora	Reporter:	tlhackque
Component:	policycoreutils	Assignee:	Daniel Walsh <dwalsh>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	15	CC:	dwalsh, mgrepl
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2012-07-27 13:22:34 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:

Description tlhackque 2011-06-24 02:45:57 UTC

Description of problem:

system-config-selinux is a great idea - but every click to change an option takes forever; it seems to take effect immediately, meaning that the policy gets recompiled and activated.  When one has more than one setting to change, this is very painful.

Instead, I suggest that system-config-selinux should only commit changes with a 'save' or 'activate' button.  This way, one can make all necessary changes quickly, and wait for activation only once!

This would really help adoption of selinux by those of us who don't deal with it frequently enough to have all the booleans memorized.

My understanding is that semanage already knows how to do batch updates (semanage -i), so this should not be too difficult - I hope.

Version-Release number of selected component (if applicable):
policycoreutils-gui.x86_64                           2.0.86-7.fc15 

How reproducible:

Steps to Reproduce:
1. Open system-config-selinux and click any checkbox!
2. Go out for coffee :-)
3. Click another checkbox
  
Actual results:

o Nearby coffee can be obtained while system-config-linux is processing the first click.

(Actually, I don't drink coffee, but the time is intolerable, especially when first setting up a system.)

Expected results:

o Instant response to click.

Additional info:

Comment 1 Daniel Walsh 2012-07-27 13:22:34 UTC

Since this version of Fedora is no longer supported I am closing this bugs.  If you are still seeing this bug in a current version of fedora, please reopen the bugzilla with the appropriate version number.