sysadmin/selinux: add a part about semanage -o/-i