[ARK PATCH] selinux: allow reading labels before policy is loaded