Oracle Linux: audit Log Reports Error "libsepol.policydb_read: policydb version 31 does not match my version range 15-30 ..."

(Doc ID 2394984.1)

Last updated on MAY 29, 2018

Applies to:

Linux OS - Version Oracle Linux 7.5 and later
Linux x86-64

Symptoms

After upgrading to Oracle Linux 7.5 with the latest RHCK (3.10.0-862.el7.x86_64) the SELinux policy is set to policy version 31:

# seinfo
Statistics for policy file: /sys/fs/selinux/policy
Policy Version & Type: v.31 (binary, mls)

# sestatus
SELinux status: enabled
SELinuxfs mount: /sys/fs/selinux
SELinux root directory: /etc/selinux
Loaded policy name: targeted
Current mode: enforcing
Mode from config file: enforcing
Policy MLS status: enabled
Policy deny_unknown status: allowed
Max kernel policy version: 31

However, there is an issue with SELinux being able to run properly because the version range does not match the policydb:

# sealert -a /var/log/audit/audit
libsepol.policydb_read: policydb version 31 does not match my version range 15-30
SELinux is disabled or we can't open a policy file


SELinux packages installed:

selinux-policy-targeted-3.13.1-192.0.1.el7_5.3.noarch
libselinux-utils-2.5-12.el7.x86_64
libselinux-python-2.5-12.el7.x86_64
libselinux-2.5-12.el7.i686
selinux-policy-3.13.1-192.0.1.el7_5.3.noarch
libselinux-2.5-12.el7.x86_64

Issue reproducible with Oracle Linux 7.5 with the latest RHCK (3.10.0-862.el7.x86_64) and selinux-policy-3.13.1-192.0.1.el7_5.3.noarch

Changes

 Upgraded to OL 7.5

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms