hardened Gentoo SELinux policy for soundserver