Not really a bug report because I did not manage to figure out the cause.

However, after upgrading from FC31 to FC32 I could not login any more, due to SELinux problems. Auto-relabeling did not work, nothing really...

... until I did dnf uninstall MonetDB-selinux.

I came to this point because trying to give systemd services the correct labels with restorecon failed with an error referencing a monetdb specific file.

I do not have the details unfortunately, but if you get problems, beware that MonetDB SELinux package and systemd may interfere in some way beyond my knowledge of these services.

Best regards,

Arjen

PS: Some output from logs:

sudo ausearch -c monetdb -m AVC,SELINUX_ERR

[..]

----
time->Sat May  2 20:57:01 2020
type=AVC msg=audit(1588445821.693:203): avc:  denied  { open } for  pid=1232 comm="monetdbd" path="/etc/resolv.conf" dev="dm-0" ino=3409775 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=file permissive=1
----
time->Sat May  2 21:12:56 2020
type=AVC msg=audit(1588446776.043:1194): avc:  denied  { execute } for  pid=2861 comm="(monetdbd)" name="monetdbd" dev="dm-0" ino=2147256 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="unconfined_u:object_r:monetdbd_exec_t:s0"
----
time->Sat May  2 21:12:56 2020
type=AVC msg=audit(1588446776.043:1195): avc:  denied  { execute_no_trans } for  pid=2861 comm="(monetdbd)" path="/usr/bin/monetdbd" dev="dm-0" ino=2147256 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="unconfined_u:object_r:monetdbd_exec_t:s0"
----
time->Sat May  2 21:12:56 2020
type=AVC msg=audit(1588446776.044:1196): avc:  denied  { map } for  pid=2861 comm="monetdbd" path="/usr/bin/monetdbd" dev="dm-0" ino=2147256 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="unconfined_u:object_r:monetdbd_exec_t:s0"
----
time->Sat May  2 21:12:56 2020
type=AVC msg=audit(1588446776.714:1197): avc:  denied  { remove_name } for  pid=1232 comm="monetdbd" name="merovingian.pid" dev="tmpfs" ino=34369 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:object_r:monetdbd_var_run_t:s0"
----
time->Sat May  2 21:12:56 2020
type=AVC msg=audit(1588446776.714:1198): avc:  denied  { unlink } for  pid=1232 comm="monetdbd" name="merovingian.pid" dev="tmpfs" ino=34369 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1
----
time->Sat May  2 21:12:56 2020
type=AVC msg=audit(1588446776.714:1199): avc:  denied  { write } for  pid=1232 comm="monetdbd" name=".merovingian_lock" dev="dm-0" ino=5899443 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:object_r:monetdbd_lock_t:s0"
----
time->Sat May  2 21:13:15 2020
type=AVC msg=audit(1588446795.214:1209): avc:  denied  { read } for  pid=2925 comm="(monetdbd)" name="passwd" dev="dm-0" ino=524514 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file permissive=1
----
time->Sat May  2 21:13:15 2020
type=AVC msg=audit(1588446795.214:1210): avc:  denied  { open } for  pid=2925 comm="(monetdbd)" path="/var/lib/sss/mc/passwd" dev="dm-0" ino=524514 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file permissive=1
----
time->Sat May  2 21:13:15 2020
type=AVC msg=audit(1588446795.214:1211): avc:  denied  { map } for  pid=2925 comm="(monetdbd)" path="/var/lib/sss/mc/passwd" dev="dm-0" ino=524514 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file permissive=1
----
time->Sat May  2 21:14:24 2020
type=AVC msg=audit(1588446864.487:1281): avc:  denied  { read } for  pid=3072 comm="(monetdbd)" name="passwd" dev="dm-0" ino=524514 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file permissive=1
----
time->Sat May  2 21:14:24 2020
type=AVC msg=audit(1588446864.487:1282): avc:  denied  { open } for  pid=3072 comm="(monetdbd)" path="/var/lib/sss/mc/passwd" dev="dm-0" ino=524514 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file permissive=1
----
time->Sat May  2 21:14:24 2020
type=AVC msg=audit(1588446864.487:1283): avc:  denied  { map } for  pid=3072 comm="(monetdbd)" path="/var/lib/sss/mc/passwd" dev="dm-0" ino=524514 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file permissive=1