The setroubleshoot-server package owns the file audit_listener_database.xml in /var/lib/setroubleshoot.  That used to be where alerts were recorded.  Recently, however, setroubleshoot has started to record in the file setroubleshoot_database.xml instead.  (In the default configuration.)  That file isn't owned by any package.

The packaging of setroubleshoot-server should probably be updated to follow the current default configuration, so that setroubleshoot_database.xml is owned by the package, and audit_listener_database.xml is not.