netlabel: Label incoming TCP connections correctly in SELinux