[LU-20045] l_getsepol fails to find SELinux policy on REHL10.1

• Type: Bug
• Resolution: Unresolved
• Priority: Minor
• Environment: RHEL10.1 with Lustre client installed

Epic/Theme

rhel10.1 security

• Severity: 2
• Assignee: Hiroshi Nishida
• Reporter: Hiroshi Nishida

Description

l_getsepol calls security_policyvers(), which returns version 33. However, RHEL 10.1 uses policy version 35 (located at /etc/selinux/targeted/policy/policy.35). Because l_getsepol searches downward from the returned version (33, 32, 31...), it fails to find the actual policy file.