The current portage_t (and related domains) has evolved towards a heavy beast, with little documentation and structure in it. There are some very good concepts used, but we might want to improve on this. This bug tracks the common errors (or less optimal choices) we find with the portage/SELinux support. Once a good set is known, we can rework the portage domain. Reproducible: Always