Initial SElinux policy

Let me know if this looks good and I'll squash the commits before merge. Thanks!