add selinux, comments