According to our records, this should be resolved by openstack-selinux-0.8.15-1.el7ost. This build is available now.
Sanity-check: $ rpm -q openstack-selinux openstack-selinux-0.8.18-1.el7ost.noarch $ ls /usr/share/openstack-selinux/0.8.18/tests/ | grep 1640528 (bug referenced in the commit from the description) bz1640528 $ grep execute /usr/share/openstack-selinux/0.8.18/tests/bz1640528 (similar AVC to description) type=AVC msg=audit(...): avc: denied { execute } for pid=... comm="sudo" name="unix_chkpwd" dev="vda1" ino=... scontext=system_u:system_r:nova_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1 $ sudo /usr/share/openstack-selinux/0.8.18/tests/check_all Results: 797 total, 0 failed Overall result: PASS
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2019:0922