Yeah it should, I'm not sure why it loses context. I think maybe vbox is creating those /dev files dynamicly and reading from default /dev context for some reason. Running restorecon manually takes care of it.

Hopefully somebody out there finds this usefull. The redhat guy said they need a vbox policy and suggested they might use this as a starting point, so this or something similar may one day end up in the offical repository. Comments and improvements are welcome.