Certain applications linked with rpmlibes call the rpm_script_t so unconfined_t needs to transition. rpmbuild policy should be dropped. --