libselinux: return EINVAL if invalid role selected

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

This patch looks good to me. acked.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk7dHdgACgkQrlYvE4MpobNv1ACeLTzML8D4EkvA8AlrYQq3EH5y dnwAoJ11+aC3a7hqhEa8KopmKU2kAeHc
=UdEj
-----END PGP SIGNATURE-----