File paths for selinux
Install script + typebounds rule

When setcon(3) is used to set a different context on a new thread without an
associated typebounds policy statement, then the call will return 'Operation not
permitted'
SELinux support in eval-api