Description of problem:

goferd service runs on client systems registered to satellite.
The service runs in "unconfined_service_t domain"

Version-Release number of selected component (if applicable):
All

How reproducible:
100%

Steps to Reproduce:
1. register client to satellite and install katello-agent
2. start goferd service
3. ps axZ | grep gofer

Actual results:
system_u:system_r:unconfined_service_t:s0 7236 ? Ssl 0:01 python /usr/bin/goferd --foreground

Expected results:

service should not run in unconfined.

Additional info:

see https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/selinux_users_and_administrators_guide/sect-security-enhanced_linux-targeted_policy-unconfined_processes