security_selinux: Lock metadata when running transaction
security_selinux: Lock metadata when running transaction

Lock all the paths we want to relabel to mutually exclude other
libvirt daemons.

The only hitch here is that directories can't be locked.
Therefore, when relabeling a directory do not lock it (this
happens only when setting up some domain private paths anyway,
e.g. huge pages directory).

Signed-off-by: Michal Privoznik <83d82aaba2eed257f4814b0c239c260c4caaadf0@redhat.com>
Reviewed-by: John Ferlan <87558058f6f829e5ec976c8ef960720af4ff9c7d@redhat.com>

zippy2/libvirt,fabianfreyer/libvirt,zippy2/libvirt,eskultety/libvirt,libvirt/libvirt,olafhering/libvirt,jfehlig/libvirt,jardasgit/libvirt,nertpinx/libvirt,jfehlig/libvirt,libvirt/libvirt,eskultety/libvirt,zippy2/libvirt,eskultety/libvirt,fabianfreyer/libvirt,crobinso/libvirt,fabianfreyer/libvirt,crobinso/libvirt,fabianfreyer/libvirt,olafhering/libvirt,olafhering/libvirt,eskultety/libvirt,olafhering/libvirt,jardasgit/libvirt,zippy2/libvirt,nertpinx/libvirt,crobinso/libvirt,libvirt/libvirt,nertpinx/libvirt,fabianfreyer/libvirt,jardasgit/libvirt,eskultety/libvirt,jfehlig/libvirt,jardasgit/libvirt,andreabolognani/libvirt,nertpinx/libvirt,andreabolognani/libvirt,andreabolognani/libvirt,crobinso/libvirt,andreabolognani/libvirt,andreabolognani/libvirt,nertpinx/libvirt,jardasgit/libvirt,jfehlig/libvirt,libvirt/libvirt