example on how to create selinux policy