The pulp-celery policy has a lot of unnecessary statements in the require section [0]. These should be removed and tested on the platforms. I believe only pulp_cert_t and puppet_etc_t are required. Even those may not be required with gen_tunable statements. [0]: https://github.com/pulp/pulp/blob/553edf38c1e1cd5a3e99bfdcae810c3e9ef39137/server/selinux/server/pulp-celery.te#L8
Moved to https://pulp.plan.io/issues/595