Description of problem:

With latest SCAP package we are getting false positive results for 
xccdf_org.ssgproject.content_rule_selinux_policytype



Version-Release number of selected component (if applicable):
[cloud-user@master-000001 ~]$ cat /etc/redhat-release 
Red Hat Enterprise Linux Server release 7.9 (Maipo)

Works:
[root@master-000000 ~]# rpm -qa | grep openscap
openscap-scanner-1.2.10-3.el7_3.x86_64
openscap-utils-1.2.10-3.el7_3.x86_64
openscap-1.2.10-3.el7_3.x86_64

Bad:
[root@master-000000 ~]# rpm -qa | grep openscap
openscap-containers-1.2.17-13.el7_9.noarch
openscap-scanner-1.2.17-13.el7_9.x86_64
openscap-utils-1.2.17-13.el7_9.x86_64
openscap-1.2.17-13.el7_9.x86_64


How reproducible:

Steps to Reproduce:
1. Run scap tests
2. Expect selinux policy to be in Targeted
3. Shows as fails
 

SELINUX on both boxes:
[cloud-user@master-000001 ~]$ cat /etc/selinux/config 

# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
#     enforcing - SELinux security policy is enforced.
#     permissive - SELinux prints warnings instead of enforcing.
#     disabled - No SELinux policy is loaded.
SELINUX=enforcing
# SELINUXTYPE= can take one of three values:
#     targeted - Targeted processes are protected,
#     minimum - Modification of targeted policy. Only selected processes are protected. 
#     mls - Multi Level Security protection.
SELINUXTYPE=targeted 


Actual results:

Fails

Expected results:

Success


Additional info:

Will attach results as private attachments