What were you trying to do that didn't work?

/usr/sbin/rhcd is having bin_t context on RHEL8, which makes it run as unconfined_service_t, which is prohibited when applying CIS L1 profile.
RHEL9 got fixed.

What is the impact of this issue to you?

Compliance issue

Please provide the package NVR for which the bug is seen:

rhc-0.2.5-1.el8_10
selinux-policy-3.14.3-139.el8_10.1

How reproducible is this bug?:

Always, just start the service