selinux: add checkpolicy and setools

/cc @marineam and @brianredbeard