I meant to say root directory of the filesystem in question. While /lib/init/rw is the main issue at the moment, as a general rule it doesn't do any harm to have an extra call to restorecon, so doing it for all tmpfs filesystems is best.