OpenQA found this when running tests with IPA server: https://openqa.fedoraproject.org/tests/237684/file/_console_avc_crash-avcs.txt ---- time->Wed May 16 06:10:59 2018 type=AVC msg=audit(1526465459.511:153): avc: denied { getattr } for pid=17449 comm="certmonger" name="/" dev="dm-0" ino=96 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=0 ---- This is a configuration where a fresh F28 is set up with IPA from https://bodhi.fedoraproject.org/updates/FEDORA-2018-93dfeefc68
selinux-policy-3.14.1-29.fc28 has been submitted as an update to Fedora 28. https://bodhi.fedoraproject.org/updates/FEDORA-2018-a74875b364
selinux-policy-3.14.1-29.fc28 has been pushed to the Fedora 28 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2018-a74875b364
selinux-policy-3.14.1-29.fc28 has been pushed to the Fedora 28 stable repository. If problems still persist, please make note of it in this bug report.