fix privsep patch
    
    the selinux-policy removed rules which allow SELinux users to use setuid()
    so we can't do setcon() before setuid()