SELinux policy for container
