On my system I have home directories in /var/home and bind mounted to /home:
/var/home on /home type none (rw,bind)
Is there any way to prevent restorecon on /var from descending into /var/home and destroying the normal home directory file contexts? Reproducing all of file_contexts.homedirs in local policy is of course unmaintainable.