[docker-io] selinux enablement + foreground mode patches