[PATCH] SELinux: default labeling of MLS field