ruby: correctly enable selinux