perhaps we should restorecon dev kmsg in init  we also have similar issues with  dev null created by init and inherited by fsck  toolbox  mkswap healthd  ueventd that would require both a file contexts entry and a restorecon call after policy load 