Description of problem:
install fresh xfce iso
open terminal
launch dnfdragora
select from "to update" to "all"
search virt-manager
check the checkbox of virt-manager
press apply
SELinux is preventing groupadd from 'read' accesses on the fifo_file fifo_file.

*****  Plugin catchall (100. confidence) suggests   **************************

If you believe that groupadd should be allowed read access on the fifo_file fifo_file by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# ausearch -c 'groupadd' --raw | audit2allow -M my-groupadd
# semodule -X 300 -i my-groupadd.pp

Additional Information:
Source Context                system_u:system_r:groupadd_t:s0
Target Context                system_u:system_r:unconfined_service_t:s0
Target Objects                fifo_file [ fifo_file ]
Source                        groupadd
Source Path                   groupadd
Port                          <Unknown>
Host                          (removed)
Source RPM Packages           
Target RPM Packages           
Policy RPM                    selinux-policy-3.14.4-37.fc31.noarch
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Host Name                     (removed)
Platform                      Linux (removed) 5.3.7-301.fc31.x86_64 #1 SMP Mon
                              Oct 21 19:18:58 UTC 2019 x86_64 x86_64
Alert Count                   6
First Seen                    2019-11-20 16:15:41 EET
Last Seen                     2019-11-20 16:15:54 EET
Local ID                      f563e3ca-65c2-41cc-a84c-e3f9fd84e9e8

Raw Audit Messages
type=AVC msg=audit(1574259354.148:364): avc:  denied  { read } for  pid=3207 comm="groupadd" path="pipe:[71079]" dev="pipefs" ino=71079 scontext=system_u:system_r:groupadd_t:s0 tcontext=system_u:system_r:unconfined_service_t:s0 tclass=fifo_file permissive=0


Hash: groupadd,groupadd_t,unconfined_service_t,fifo_file,read

Version-Release number of selected component:
selinux-policy-3.14.4-37.fc31.noarch

Additional info:
component:      selinux-policy
reporter:       libreport-2.10.1
hashmarkername: setroubleshoot
kernel:         5.3.7-301.fc31.x86_64
type:           libreport