[root@d1000 spool]# rpm -V postfix /etc/security/selinux/file_contexts: No such file or directory S.5....T c /etc/postfix/aliases.db [root@d1000 spool]# Why have the %config(noreplace) %{postfix_config_dir}/aliases.db and ship aliases.db in the postfix binary RPM? It breaks rpm verification since starting the postfix daemon will always overwrite the bogus shipped aliases.db with a correctly generated one....
Fixed in rawhide in rpm postfix-2.1.1-3.1 or newer.