userhelper.te has a line: type userhelper_t, domain, privlog, privrole, privowner, auth_chkpwd, privfd, ifdef(`user_canbe_sysadm', `privuser'); If user_canbe_sysadm is not defined, this is a syntax error. The line should probably be fixed as type userhelper_t, domain, privlog, privrole, privowner, auth_chkpwd, privfd ifdef(`user_canbe_sysadm', `, privuser'); i.e. move the coma inside the ifdef.
Fixed in policy-1.9.2-8