tweaks for selinux