This bug is split off from https://bugzilla.redhat.com/show_bug.cgi?id=1121301 , as the mislabeling of three files in /etc is caused by systemd (according to Zbigniew) and seems to be a separate issue from the quasi-random mislabeling of hundreds of files in /usr and /var.

So, this bug covers the fact that since 2014-07-08, every F21 and F22 branch live image generated (the auto-generated nightlies, and the manually built Alpha TC1/TC2 compose attempts) has three mislabeled files in /etc:

/etc/passwd-
/etc/group-
/etc/.updated

restorecon reset /etc/.updated context system_u:object_r:etc_runtime_t:s0->system_u:object_r:etc_t:s0
restorecon reset /etc/passwd- context system_u:object_r:tmpfs_t:s0->system_u:object_r:passwd_file_t:s0
restorecon reset /etc/group- context system_u:object_r:tmpfs_t:s0->system_u:object_r:passwd_file_t:s0

the mislabelling of /etc/passwd- and /etc/group- is especially serious, as it causes the live images to fail to boot without enforcing=0 being passed. Hence, nominating this as an Alpha release blocker per https://fedoraproject.org/wiki/Fedora_21_Alpha_Release_Criteria#Release-blocking_images_must_boot , "All release-blocking images must boot in their supported configurations."