repository.mk: execute chcon only if selinux is enabled