test selinux policy