This service runs `restorecon` on `/var` to fix any errant SELinux labels when the system first boots following an update.