My Oracle Support Banner

Oracle Linux: audit Log Reports Error "libsepol.policydb_read: policydb version 31 does not match my version range 15-30 ..." (Doc ID 2394984.1)

Last updated on AUGUST 04, 2018

Applies to:

Linux OS - Version Oracle Linux 7.5 and later
Linux x86-64


After upgrading to Oracle Linux 7.5 with the latest RHCK (3.10.0-862.el7.x86_64) the SELinux policy is set to policy version 31:

# seinfo
Statistics for policy file: /sys/fs/selinux/policy
Policy Version & Type: v.31 (binary, mls)

# sestatus
SELinux status: enabled
SELinuxfs mount: /sys/fs/selinux
SELinux root directory: /etc/selinux
Loaded policy name: targeted
Current mode: enforcing
Mode from config file: enforcing
Policy MLS status: enabled
Policy deny_unknown status: allowed
Max kernel policy version: 31

However, there is an issue with SELinux being able to run properly because the version range does not match the policydb:

# sealert -a /var/log/audit/audit
libsepol.policydb_read: policydb version 31 does not match my version range 15-30
SELinux is disabled or we can't open a policy file

SELinux packages installed:


Issue reproducible with Oracle Linux 7.5 with the latest RHCK (3.10.0-862.el7.x86_64) and selinux-policy-3.13.1-192.0.1.el7_5.3.noarch


 Upgraded to OL 7.5


To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.