SELinux policy for rootlesskit
