selinux: handle files opened with flags 3 by checking ioctl permission