tun: fix LSM/SELinux labeling of tun/tap devices