branches: 1.4.6; 1.4.8;From Joy Latten <latten@austin.ibm.com>Fix file descriptor shortage when using labeled IPsec.