SELinux policy for a service that runs podman build

[invisibleroads]

It is possible to write an SELinux policy for a systemd service that runs podman build?

I have tried various approaches, including udica, but podman build consistently hangs.

containers/udica#156