Description of problem:
sudo dnf install @cinnamon-desktop-environment
and
sudo dnf install @kde-desktop-envionment
on a fresh rawhide install.
SELinux is preventing groupadd from using the 'net_admin' capabilities.

*****  Plugin catchall (100. confidence) suggests   **************************

If you believe that groupadd should have the net_admin capability by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# ausearch -c 'groupadd' --raw | audit2allow -M my-groupadd
# semodule -X 300 -i my-groupadd.pp

Additional Information:
Source Context                unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c102
                              3
Target Context                unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c102
                              3
Target Objects                Unknown [ capability ]
Source                        groupadd
Source Path                   groupadd
Port                          <Unknown>
Host                          (removed)
Source RPM Packages           
Target RPM Packages           
Policy RPM                    selinux-policy-3.13.1-249.fc27.noarch
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Host Name                     (removed)
Platform                      Linux (removed) 4.11.0-0.rc6.git2.1.fc27.x86_64 #1
                              SMP Wed Apr 12 14:45:06 UTC 2017 x86_64 x86_64
Alert Count                   6
First Seen                    2017-04-14 14:52:13 CEST
Last Seen                     2017-04-14 15:06:32 CEST
Local ID                      dcfc2817-68d0-4142-ab97-5c4ed83c1430

Raw Audit Messages
type=AVC msg=audit(1492175192.264:409): avc:  denied  { net_admin } for  pid=7845 comm="groupadd" capability=12  scontext=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 tclass=capability permissive=0


Hash: groupadd,groupadd_t,groupadd_t,capability,net_admin

Version-Release number of selected component:
selinux-policy-3.13.1-249.fc27.noarch

Additional info:
component:      selinux-policy
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.0-0.rc6.git2.1.fc27.x86_64
type:           libreport

Potential duplicate: bug 1416964