insufficient testing for selinux, apparmor
configure tests for selinux and apparmor libraries, but not for the relevant headers, so compilation fails if the development package isn't installed; e.g. HAVE_SELINUX is defined, so procenv.h tries to include the non-existent header. (I actually saw it with selinux, and apparmor looks the same.)
Also the spec file should have libselinux-devel added to BuildRequires to ensure the header is present, although it seems to be pulled in by something else in Fedora.