More digging and "getsebool -a | grep rsync" revealed the rsync_export_all_ro bool. I set that and now it looks like I can rsync from my BackupPC system. setsebool -P rsync_export_all_ro 1 <https://linux.die.net/man/8/rsync_selinux>