sudo was rebased between 7.3 and 7.4 one of the changes was the following:

  2013-02-06  Todd C. Miller  <Todd.Miller@courtesan.com>

        * configure, configure.in, doc/UPGRADE, mkpkg, src/Makefile.in,
        src/load_plugins.c, sudo.pp:
        Sudo now stores its libexec files in a "sudo" subdirectory instead
        of in libexec itself. For backwards compatibility, if the plugin is
        not found in the default plugin directory, sudo will check the
        parent directory default directory ends in "/sudo".
        [5de67de76489]

This moved the following files into a sub directory and the patch for selinux-policy was not updated to match:

ls -al /usr/libexec/sudo
total 524
drwxr-xr-x.  2 root root    156 Aug 11 16:05 .
drwxr-xr-x. 42 root root  12288 Aug 11 16:05 ..
-rw-r--r--.  1 root root  11104 Jun  7 06:38 group_file.so
lrwxrwxrwx.  1 root root     21 Aug 11 16:05 libsudo_util.so.0 -> libsudo_util.so.0.0.0
-rw-r--r--.  1 root root  82120 Jun  7 06:38 libsudo_util.so.0.0.0
-rwxr-xr-x.  1 root root  15376 Jun  7 06:38 sesh
-rw-r--r--.  1 root root 388104 Jun  7 06:38 sudoers.so
-rw-r--r--.  1 root root   6880 Jun  7 06:38 sudo_noexec.so
-rw-r--r--.  1 root root   6928 Jun  7 06:38 system_group.so


policy-rhel-7.4-base.patch

-/usr/libexec/sesh              --      gen_context(system_u:object_r:shell_exec_t,s0)
+/usr/libexec/cockpit-agent      --  gen_context(system_u:object_r:shell_exec_t,s0)
+/usr/bin/cockpit-bridge         -- gen_context(system_u:object_r:shell_exec_t,s0)
+/usr/libexec/sesh                      --      gen_context(system_u:object_r:shell_exec_t,s0)


This should be changed to:

+/usr/libexec/sudo/sesh                      --      gen_context(system_u:object_r:shell_exec_t,s0)