A new top-level directory was created, gaining the default label for new top-level directories,
SELinux denies starting a service if ExecStart is a program created in a new top-level directory (
Is there a purpose to this denial?
sealert suggested that any of the following labels would have been permitted:
so we can rule out the possibility that it blocks someone running a daemon from a user-writeable location like
SELinux policy: selinux-policy-targeted-3.13.1-225.18.fc25.noarch