add SELinux support