[CentOS] strict selinux policy?