during merge the SELinux labels are not set on the destination _directories_. for S_ISREG, S_ISBLK, S_ISLNK, ... special care is taken (either by using selinux.secure_copy, selinux.secure_symlink), but for directories there is no labeling during the merge process. have a look at my patch. it works for me :)
Created attachment 40027 [details, diff] portage.py.diff
Created attachment 40054 [details, diff] portage.py.diff just realized that there is more than one place where labels have to be set for merged directories
ok this is a problem, just have to get a correct patch for it :x
Created attachment 40165 [details, diff] portage.py.diff latest version
Created attachment 40166 [details, diff] portage-2.0.51_rc1.ebuild.diff updated RDEPEND line
in 2.0.51_rc6
hmm, should have closed this ages ago. thanks Nicholas, it works great.