[Unit]
Description=Restore SELinux file contexts in /var
ConditionNeedsUpdate=/var
DefaultDependencies=no
After=local-fs.target
Before=sysinit.target
Before=systemd-tmpfiles-setup.service
Before=systemd-update-done.service

[Service]
Type=oneshot
ExecStart=/usr/sbin/restorecon -RFv /var

[Install]
WantedBy=sysinit.target