On Thu, 30 Oct 2025 16:19:13 +0530
Danish Prakash
It might be possible to avoid using SELinux template (%USERID), and instead using regex to match user ids. This would allow discarding the explicit restorecon call while during package builds[1].
Original suggestion from cathy.hu@suse.com:
running restorecon would be unnecessary if the passt upstream selinux module would not use ${USERID} in pasta.fc (gets converted to [0-9]+ anyway)
[1] - https://passt.top/passt/commit/?id=e019323538699967c155c29411545223dadfc0f5
Applied, thanks for the patch and for following up! Max, thanks for testing and reviewing, I took the liberty to translate your comments into Tested-by: and Reviewed-by: tags as they clearly seemed to indicate that. -- Stefano