selinux cares about trailing bit