sergeant: exclude file /etc/selinux