Policy analysis tools for SELinux