Keep in mind this is an upgraded system, not a clean installation.

Whenever I start guests, freshly booted system, I get:

error: Failed to start domain 'xxxxxx'
error: can't connect to virtlogd: Unable to open system token /run/libvirt/common/system.token: Permission denied

Workaround:

* Stop libvirt services
* Remove /run/libvirt/common
* Restart services

Details:

* SELinux details within /run/libvirt after boot

drwxr-xr-x.  7 root root system_u:object_r:virt_var_run_t:s0            500 Apr 24 09:17 .
drwxr-xr-x. 56 root root system_u:object_r:var_run_t:s0                1540 Apr 24 09:19 ..
drwx------.  2 root root system_u:object_r:virt_var_run_t:s0             60 Apr 24 09:02 common
drwxr-xr-x.  2 root root system_u:object_r:virt_var_run_t:s0             40 Apr 24 09:02 hostdevmgr
drwxr-xr-x.  2 root root system_u:object_r:virt_lxc_var_run_t:s0         60 Apr 24 09:04 lxc
drwxr-xr-x.  4 root root system_u:object_r:virt_var_run_t:s0            220 Apr 24 09:19 network
drwxr-xr-x.  6 qemu qemu system_u:object_r:virt_var_run_t:s0            140 Apr 24 09:19 qemu
srw-rw-rw-.  1 root root system_u:object_r:virt_var_run_t:s0              0 Apr 24 09:02 libvirt-sock
srw-rw-rw-.  1 root root system_u:object_r:virtinterfaced_var_run_t:s0    0 Apr 24 09:02 virtinterfaced-sock
srw-------.  1 root root system_u:object_r:virtlogd_var_run_t:s0          0 Apr 24 09:02 virtlockd-sock
srw-------.  1 root root system_u:object_r:virtlogd_var_run_t:s0          0 Apr 24 09:17 virtlogd-admin-sock
srw-------.  1 root root system_u:object_r:virtlogd_var_run_t:s0          0 Apr 24 09:02 virtlogd-sock
srw-------.  1 root root system_u:object_r:virt_lxc_var_run_t:s0          0 Apr 24 09:02 virtlxcd-admin-sock
srw-rw-rw-.  1 root root system_u:object_r:virt_lxc_var_run_t:s0          0 Apr 24 09:02 virtlxcd-sock
srw-rw-rw-.  1 root root system_u:object_r:virt_lxc_var_run_t:s0          0 Apr 24 09:02 virtlxcd-sock-ro
srw-------.  1 root root system_u:object_r:virtnetworkd_var_run_t:s0      0 Apr 24 09:17 virtnetworkd-admin-sock
srw-rw-rw-.  1 root root system_u:object_r:virtnetworkd_var_run_t:s0      0 Apr 24 09:02 virtnetworkd-sock
srw-rw-rw-.  1 root root system_u:object_r:virtnetworkd_var_run_t:s0      0 Apr 24 09:17 virtnetworkd-sock-ro
srw-rw-rw-.  1 root root system_u:object_r:virtnodedevd_var_run_t:s0      0 Apr 24 09:02 virtnodedevd-sock
srw-rw-rw-.  1 root root system_u:object_r:virtnwfilterd_var_run_t:s0     0 Apr 24 09:02 virtnwfilterd-sock
srw-------.  1 root root system_u:object_r:virtqemud_var_run_t:s0         0 Apr 24 09:02 virtqemud-admin-sock
srw-rw-rw-.  1 root root system_u:object_r:virtqemud_var_run_t:s0         0 Apr 24 09:02 virtqemud-sock
srw-rw-rw-.  1 root root system_u:object_r:virtqemud_var_run_t:s0         0 Apr 24 09:02 virtqemud-sock-ro
srw-rw-rw-.  1 root root system_u:object_r:virtsecretd_var_run_t:s0       0 Apr 24 09:02 virtsecretd-sock
srw-rw-rw-.  1 root root system_u:object_r:virtstoraged_var_run_t:s0      0 Apr 24 09:02 virtstoraged-sock

* SELinux details after applying workaround

total 0
drwxr-xr-x. 13 root root system_u:object_r:virt_var_run_t:s0         380 Apr 24 09:24 .
drwxr-xr-x. 56 root root system_u:object_r:var_run_t:s0             1560 Apr 24 09:25 ..
drwx------.  2 root root system_u:object_r:virt_common_var_run_t:s0   60 Apr 24 09:24 common
drwxr-xr-x.  2 root root system_u:object_r:virt_var_run_t:s0          40 Apr 24 09:02 hostdevmgr
drwx------.  2 root root system_u:object_r:virt_var_run_t:s0          60 Apr 24 09:24 interface
drwxr-xr-x.  2 root root system_u:object_r:virt_lxc_var_run_t:s0      80 Apr 24 09:24 lxc
drwxr-xr-x.  4 root root system_u:object_r:virt_var_run_t:s0         260 Apr 24 09:24 network
drwx------.  2 root root system_u:object_r:virt_var_run_t:s0          60 Apr 24 09:24 nodedev
drwx------.  2 root root system_u:object_r:virt_var_run_t:s0          60 Apr 24 09:24 nwfilter
drwx------.  2 root root system_u:object_r:virt_var_run_t:s0          40 Apr 24 09:23 nwfilter-binding
drwxr-xr-x.  6 qemu qemu system_u:object_r:virt_var_run_t:s0         240 Apr 24 09:25 qemu
drwx------.  2 root root system_u:object_r:virt_var_run_t:s0          60 Apr 24 09:24 secrets
drwxr-xr-x.  2 root root system_u:object_r:virt_var_run_t:s0          80 Apr 24 09:24 storage
srw-------.  1 root root system_u:object_r:virt_var_run_t:s0           0 Apr 24 09:24 libvirt-admin-sock
srw-rw-rw-.  1 root root system_u:object_r:virt_var_run_t:s0           0 Apr 24 09:24 libvirt-sock
srw-rw-rw-.  1 root root system_u:object_r:virt_var_run_t:s0           0 Apr 24 09:24 libvirt-sock-ro
srw-------.  1 root root system_u:object_r:virtlogd_var_run_t:s0       0 Apr 24 09:02 virtlockd-sock
srw-------.  1 root root system_u:object_r:virtlogd_var_run_t:s0       0 Apr 24 09:24 virtlogd-admin-sock
srw-------.  1 root root system_u:object_r:virtlogd_var_run_t:s0       0 Apr 24 09:24 virtlogd-sock


Reproducible: Always

Steps to Reproduce:
1.Boot f40 system
2.Start guest through libvirt (virt-manager, virsh, ...)
3.
Actual Results:  
error: can't connect to virtlogd: Unable to open system token /run/libvirt/common/system.token: Permission denied

Expected Results:  
Domain 'xxxxxx' is started without errors