the devices that systemd creates need to associate with tmpfs filesystems

This one is weird (hostnamed):

avc:  denied  { mounton } for  pid=14073 comm="(ostnamed)" path="/root" dev="dm-2" ino=2228225 scontext=sys.u:sys.r:systemd.common_subject tcontext=sysadm.u:sysadm.r:home_user tclass=dir permissive=1