Comment 17 for bug 1646015

"invoke-rc.d: policy-rc.d denied execution of start." is more than probably coming from /usr/sbin/policy-rc.d that is something managed by the user (or apparently after some quick googling, used in docker containers). AFAICT this has nothing to do with the lack audit support in containers.

The RH bug you mentioned is quite old, was this tested again?