Foreman » SELinux

The RPM postinstall scriptlet doesn't appear to reload the new module into the SELinux policy when the package is upgraded(!).

[root@localhost ~]# semodule -l | grep foreman
[root@localhost ~]# yum install foreman-selinux-1.6.0-0.1.RC1.el7 -y >/dev/null 2>&1; echo $?
0
[root@localhost ~]# semodule -l | grep foreman
foreman    1.6.0.0.1    
[root@localhost ~]# yum upgrade foreman-selinux-1.6.0-0.2.RC2.el7 -y >/dev/null 2>&1; echo $?
0
[root@localhost ~]# semodule -l | grep foreman
foreman    1.6.0.0.1    

This appears to have been introduced in #6780 for 1.6.