20.3. Changes to SELinux

SELinux policy modules related to EPEL packages moved to -extra subpackages in the CRB repository

In RHEL 10.0, the SELinux policy modules related only to packages contained in the Extra Packages for Enterprise Linux (EPEL) repository and not to any RHEL package were moved from the selinux-policy package to the selinux-policy-epel package. This reduced the size of selinux-policy, allowing the system to perform operations such as rebuilding and loading the SELinux policy faster.

rpm -ql returns incorrect location of the selinux-policy packages on RHEL in image mode

The rpm -ql command lists non-existent locations of the selinux-policy and selinux-policy-targeted when used on RHEL in image mode. The policy modules are installed in the /etc/selinux/targeted instead of /var/lib/selinux/targeted directory, as misleadingly reported by rpm. This discrepancy is expected because most file systems in image mode are read-only, and the RPM tool doesn’t have the actual location of installed packages.