I spotted a SELinux security-context race introduced by the circa-2012 fix for Bug#11100, and installed the attached patch into coreutils master. This also gets rid of a label and goto (which is what led me to find the issue).