[PATCH 01/35] selinux: allow labeling before policy is loaded