update cookbook, selinux