SELinux policy for thunderbolt
