selinux: fix error codes in cond_read_node()