tuna: More SELinux rules.

Quick and dirty, but there are no big denials ATM.