base-files: add /media to System::Shared SMACK label