7c655bee5cd8 ("selinux: only filter copy-up xattrs following initialization")