selinux: fix cond_list corruption when changing booleans