[PATCH 1/2] Fix SELinux AVCs due to restorecond and shadow.db