Hey ga_beng_cui, Welcome to openEuler Community.
All of the projects in openEuler Community are maintained by @openeuler-ci-bot.
That means the developers can comment below every pull request or issue to trigger Bot Commands.
Please follow instructions at https://gitee.com/openeuler/community/blob/master/en/sig-infrastructure/command.md to find the details.

原因是高版本systemd代码中切换security_getenforce()接口==>map映射 SELinux states page来获取selinux的状态，这样做可以节省系统调用。
但是Selinux不允许systemd这样做，需要selinux做一定适配。
目前github社区和fedora的selinux已提供方案允许systemd map操作，selinux已同意修改。
确认issue关闭，在selinux-policy提issue跟踪。

相关链接
systemd 切换/引入SELinux status Pages
https://github.com/systemd/systemd/pull/16821
https://github.com/systemd/systemd/pull/17479/commits/ab278cd3eb1a2badd4b11f41abd79311988fb791

SELinuxProject/refpolicy 允许systemd map SELinux status Pages
https://github.com/SELinuxProject/refpolicy/pull/308

fedora-selinux/selinux-policy 允许systemd map SELinux status Pages
https://github.com/fedora-selinux/selinux-policy/pull/464

使用最新版本已验证，无此问题