Created attachment 1272816 [details]
patch to fix the issue

Description of problem:

selinux-policy-sandbox always disable the sandbox module on upgrade, thus making 'sandbox' show on a regular basis a rather curious message. It took me a while to figure what was cuasing this until I tought about searching the rpm scriptlet. 



Version-Release number of selected component (if applicable):
selinux-policy-sandbox-3.13.1-249.fc26.noarch
but also affect EL7.


How reproducible:
each time

Steps to Reproduce:
1. use sandbox
2. wait for a selinux-policy-sandbox upgrade
3. upgrade

Actual results:
sandbox show a unhelpful message:

$ sandbox id
ERROR: could not find datum for type sandbox_t
/usr/bin/sandbox: Sandbox Policy is not currently installed.
You need to install the selinux-policy-sandbox package in order to run this command

Expected results:
$ sandbox id                     
uid=1000 gid=1000 groupes=1000,10,135 contexte=unconfined_u:unconfined_r:sandbox_t:s0:c749,c8

Additional info:

This is linked to https://bugzilla.redhat.com/show_bug.cgi?id=1380325, filled for RHEL 7 (who basically ask for a better message).

And a patch is attached against master in dist-git.