Mount zipfuse with fscontext and context

The zipfuse filesystem is now mounted with its own selinux context using
the 'fscontext=' option. The files in the filesystem are by default
labeled as system_file via the 'context=' option.

Bug: 188400186
Test: atest MicrodroidHostTestCases
Change-Id: I0f046124bdf4f6189b0be9c5b0b503332bdec332
diff --git a/zipfuse/zipfuse.rc b/zipfuse/zipfuse.rc
index 97306ea..ccd94b6 100644
--- a/zipfuse/zipfuse.rc
+++ b/zipfuse/zipfuse.rc
@@ -1,2 +1,2 @@
-service zipfuse /system/bin/zipfuse /dev/block/by-name/microdroid-apk /mnt/apk
+service zipfuse /system/bin/zipfuse -o fscontext=u:object_r:zipfusefs:s0,context=u:object_r:system_file:s0 /dev/block/by-name/microdroid-apk /mnt/apk
     disabled