There is no /usr/bin/puppetca wrapper anymore so it is impossible to start "puppet ca" command in the correct SELinux domain puppetca_t. The puppetagent, puppetmaster and puppetca wrappers were removed, in Fedora Rawhide and EPEL7 these were renamed to: - /usr/bin/start-puppet-agent - /usr/bin/start-puppet-master We need to introduce additional one: - /usr/bin/start-puppet-ca to be able to start correctly with SELinux. Note: For EPEL6 it would be good to backport this change as: - /usr/bin/puppetca as it is missing from there (it contains puppetd and puppetmasterd).
http://koji.fedoraproject.org/koji/taskinfo?taskID=7426136 http://koji.fedoraproject.org/koji/taskinfo?taskID=7426143