SELinux: header generation may hit infinite loop