libsepol's %post fails on an upgrade because /dev/initctl doesn't exist (as there's not real init). It should probably check for both the existence of /sbin/telinit and /dev/initctl
Fixed in 1.11.14-2