SELinux first policy draft