hardened Gentoo SELinux policy for dbskk