[CentOS] selinux policy (& engine) broken in C7