Pulp

Steps:

getenforce # make sure selinux is on
mkdir modules
chown 777 modules
pulp-puppet-module-builder --output-dir=/modules --url=https://github.com/puppetlabs/puppetlabs-apache.git
pulp-admin puppet repo create --repo-id test --feed "file:///modules"
pulp-admin puppet repo sync run --repo-id test

The sync will fail with selinux denials:

type=AVC msg=audit(1470928423.205:2407): avc:  denied  { read } for  pid=26322 comm="celery" name="PULP_MANIFEST" dev="vda3" ino=2359298 scontext=system_u:system_r:celery_t:s0 tcontext=unconfined_u:object_r:default_t:s0 tclass=file
type=SYSCALL msg=audit(1470928423.205:2407): arch=c000003e syscall=2 success=no exit=-13 a0=3188980 a1=0 a2=1b6 a3=24 items=0 ppid=26037 pid=26322 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) ses=4294967295 comm="celery" exe="/usr/bin/python2.7" subj=system_u:system_r:celery_t:s0 key=(null)
type=AVC msg=audit(1470928423.242:2408): avc:  denied  { open } for  pid=30414 comm="celery" path="/etc/hosts" dev="vda3" ino=8633 scontext=system_u:system_r:celery_t:s0 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=file
type=SYSCALL msg=audit(1470928423.242:2408): arch=c000003e syscall=2 success=no exit=-13 a0=7f02bcb1c47e a1=80000 a2=1b6 a3=24 items=0 ppid=26037 pid=30414 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) ses=4294967295 comm="celery" exe="/usr/bin/python2.7" subj=system_u:system_r:celery_t:s0 key=(null)

I haven't tested but I think this issue may also exist for other file types like yum.