restorecon doese not work inside the chroot, because there is no selinuxfs mounted on
/sys/fs/selinux, leading to no loaded selinux policy being loaded.
Setfiles bypasses the loaded policy, and just uses the installed policy.
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>