SELinux: correctly detect proc filesystems of the form "proc/foo"