use generic selinux policy