Rework SELinux policy