sediff reported "Killed"

[pengshanyu]

Hi,
When I run sediff to check the difference of two SELinux policy files, I did not specify any expression, because I'd like to check all supported policy elements. But the following command does not work for me.

# sediff /etc/selinux/targeted/policy/policy.33 /sys/fs/selinux/policy
Killed 

It seems that this command took too long and was terminated. Could someone give me some help please? Thanks.

[pebenito]

sediff is extremely resource intensive when you compare rules. Please check dmesg to see if it was killed by OOM. If there are large numbers of rules, such as in a policy with unconfined, sediff can easily need 15GB-20GB memory.