SELinux: better support for selinux