Description of problem:
Installation fails in enforcing mode because ipa-server-install update dse.ldif
but with wrong SElinux context

Version-Release number of selected component (if applicable):
sh$ rpm -q freeipa-server
freeipa-server-4.6.0-2.fc27.x86_64

How reproducible:
Deteministic

Steps to Reproduce:
1. dnf install -y freeipa-server
2. /usr/sbin/ipa-server-install --hostname=ipa-lovely-name.testrelm.test -r
TESTRELM.TEST -n testrelm.test -p Secret123 -a Secret123 -U


Actual results:
  [5/45]: updating configuration in dse.ldif
  [6/45]: starting directory server
  [error] CalledProcessError: Command '/bin/systemctl start
dirsrv@TESTRELM-TEST.service' returned non-zero exit status 1.
ipapython.admintool: ERROR    Command '/bin/systemctl start
dirsrv@TESTRELM-TEST.service' returned non-zero exit status 1.
ipapython.admintool: ERROR    The ipa-server-install command failed. See
/var/log/ipaserver-install.log for more information

Expected results:
Installation pass without any other problems

Additional info:

sh# ausearch -m avc -ts recent -i
----
type=AVC msg=audit(09/12/2017 03:58:23.484:320) : avc:  denied  { link } for
pid=15563 comm=ns-slapd name=dse.ldif dev="dm-0" ino=25973397
scontext=system_u:system_r:dirsrv_t:s0
tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=file permissive=0

sh# find /etc/ -inum 25973397
/etc/dirsrv/slapd-TESTRELM-TEST/dse.ldif

sh# ls -lZ /etc/dirsrv/slapd-TESTRELM-TEST/dse.ldif
-rw-------. 1 dirsrv dirsrv unconfined_u:object_r:user_tmp_t:s0 67949 Sep 12
03:58 /etc/dirsrv/slapd-TESTRELM-TEST/dse.ldif

sh# matchpathcon /etc/dirsrv/slapd-TESTRELM-TEST/dse.ldif
/etc/dirsrv/slapd-TESTRELM-TEST/dse.ldif
system_u:object_r:dirsrv_config_t:s0