[PATCH] selinux: fix and cleanup mprotect checks