Merge "Fix selinux denials when applying updates in recovery."