hardened Gentoo SELinux policy for kerneloops