additional SELinux check tweeks